{"report_id":"28b89347-371a-48ab-a6c6-5baeefbb9507","version":6,"status":"done","tags":[],"date":"2026-03-01T12:19:51Z","url":{"schema":"http","addr":"microsoftbattle.net","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":0,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"http","addr":"microsoftbattle.net/","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"title":"Battle.net Login","dom":{"size":20823,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4139)","md5":"be989f191f89d94b5abb0d06487f787f","sha1":"faff558c48a22f7f4b5d2338c0d0260e5b40ec1e","sha256":"d44e3fbe8fabc38ee71274270de384ce894825112cf1c8caf7dcb395ebb9fce4","sha512":"df72e1a0735e0e42aaecce7750ffd6bfe4392a5b200bfedf0807fa3ebdb21909bf868be06250850757b6ecff3f8e0a057fe2ce5ca8f69262905e4c540b5e8485","ssdeep":"192:+YsXLut9/BkXpSBjYvpeBHnHGHgbqHKVfAXare6+k5IYrVSpokOBiGBgBFumbj:Cu/+XzsFHGgbqHKTrTJVRBiGWTum3","tlshash":"7d92b551a800cc738993def4fbc5eb14a49d8139cb44c8c8d2a95af92af1d0957e17b7","dom_hash":"domhasha0ebb0d289a953b2800aee3e005a9949","first_seen":"2026-03-01T12:20:00.128725Z","last_seen":"2026-03-01T19:57:08.279097Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"microsoftbattle.net","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":0,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-05T12:19:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"geo.battle.net","ip":{"addr":"52.84.50.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-03-26","domain_rank":445722,"first_seen":"2020-01-30T12:05:08Z","last_seen":"2026-02-23T23:15:36.507846Z","alert_count":0,"request_count":1,"received_data":466,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"bnetaccount.akamaized.net","ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-18","domain_rank":273816,"first_seen":"2021-04-29T07:16:43Z","last_seen":"2026-02-11T22:34:02.298686Z","alert_count":0,"request_count":8,"received_data":1306163,"sent_data":4566,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"baseui.akamaized.net","ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-18","domain_rank":472909,"first_seen":"2025-02-08T17:33:28Z","last_seen":"2026-02-23T23:15:35.46512Z","alert_count":0,"request_count":7,"received_data":12148,"sent_data":3264,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"blz-contentstack-assets.akamaized.net","ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-18","domain_rank":364204,"first_seen":"2021-06-04T12:02:01Z","last_seen":"2026-02-23T23:15:36.506689Z","alert_count":0,"request_count":5,"received_data":939905,"sent_data":2940,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"navbar.blizzard.com","ip":{"addr":"52.84.50.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1994-12-09","domain_rank":480948,"first_seen":"2018-12-19T15:28:44Z","last_seen":"2026-02-23T23:15:35.673428Z","alert_count":0,"request_count":4,"received_data":35933,"sent_data":2116,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"microsoftbattle.net","ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"domain_registered":"2026-02-22","domain_rank":0,"first_seen":"2026-03-01T12:19:53.823996Z","last_seen":"2026-03-01T12:19:53.823996Z","alert_count":132,"request_count":33,"received_data":1643729,"sent_data":12694,"comment":"","tags":null,"fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/analytics.2Cckf.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbbe9671d2af784792f41af6631fbfd","sha1":"37733f81204637282ed875a42a88233f183fc18a","sha256":"97a8fd7fa921b111a3b4d3ee4c4013ceb9280cffd638e3edd4ce1652b524b587","sha512":"08d93b954bcbf31de23b54e122d0e3176f4e9d9cb3d8f1351662656fac4df6b161604baf361240a1e999e97c7f9eb162bb68d93e9814e0d5f3279db6c8340829","ssdeep":"","tlshash":"d6f0dca636055e3061d21bd92efe8a0935023334608d4c31ae6ed85a1b7fed26853e5c","size":480,"data":"","first_seen":"2026-03-01T12:20:00.266407Z","last_seen":"2026-03-01T19:57:08.352026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit.0r0f1.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0271326e94629839ae1d3031817d4cb0","sha1":"efcd9c46d02124c82206300c6bbefa8f7381bfff","sha256":"800be1a2dc0eb5d83647a791d17f0d0e5e306b0b9ddf09a203d6913e483c0090","sha512":"909cbf2c0f2f2ffa39b3a57390b988b813c57c9fb899077376124eebcf3f5b40a8e1606852978899e1d8ed7d7695afa1c4d960d3a33a037a432fff4647c8b226","ssdeep":"6144:VwjY1DaQEyhDdbJlIpnsWLyWwabo+uiPfjf4nvSDA:VDalzkvSDA","tlshash":"93449349b7ef2122417771ba4e5f5189b23d803b594a9c297c6c82e42f9483843f7fb9","size":267758,"data":"","first_seen":"2023-05-25T06:55:49Z","last_seen":"2026-04-06T12:51:05.282603Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/core.3efP0.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f03255cd4524a82a7ab8016de258db5","sha1":"36c5e3979f1e0fdad9e86e2ea07f4d4042d26b37","sha256":"2ed3fe08cc6ec796a29ec6db95d0f734de472b2a966c5f3ceae12a3f5c500894","sha512":"3a256215e1a742e15b50b8d30737001d42587186f2249c4aa9d01d0b5ca01bd52305dc4acc7b73c5cb20cee610df4976c3150f184a7dc7ad0ed53c5c4999b0d8","ssdeep":"1536:2toK9xuXaGDYLfxxEFYsbXBNStjBS2oEx/WjjB4W2swzCmGpTV1lvvGBbFzQ47G9:o94xNStLuD2sQCmW8bFzQ47GK2","tlshash":"b2a319cd72c6b06257e7607a407f610ff2361999284d8450f125e8e9bcb4a8e523bf7d","size":101795,"data":"","first_seen":"2026-03-01T12:20:00.208197Z","last_seen":"2026-03-01T19:57:08.328711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2aab00cff2dbc852b9ec539a906049c1","sha1":"daca55437efb1352a34b1cba068a2639ce1ba617","sha256":"64f72229ab7c31f68ad5aa665a65d53dc155378958ceadd46ffe3e8d1e61045b","sha512":"41357a6dc218a7f0800b9613ea6b228748c9aa59fe22ce2638a8172c9d45da009a319f9ab57fbe89b111162729f6290cb90fde084946393ab8672c614ccb4eef","ssdeep":"","tlshash":"57b02b502444c20dcfc185f75016960530448950a9c08141835c0cf0000dd979c00d03","size":122,"data":"","first_seen":"2023-03-13T09:19:27Z","last_seen":"2026-03-01T19:57:08.366459Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/embed-0.1.5.min.2QnZN.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36847b3a70065314863dfe44fe2999a","sha1":"fad27233fb310c253100c018edba737859f29dd3","sha256":"4906250859322a4d070a2e056d511927738d228ea180966b8697ef3043bc9430","sha512":"a4c3f6f18e9b4e07cf532a055f0f927e56d24bb13ceef73d7bfc0948ee30f5b801900468694950ee2d7c4bd5a8925fa3b956b31b6f042745c6a612c1ab93f994","ssdeep":"","tlshash":"1541f1da72c3f0b8e64b632154af665bb73aa8a5180da054d658c0907df4e0dc437e8e","size":1998,"data":"","first_seen":"2023-03-07T18:42:57Z","last_seen":"2026-04-06T12:51:05.384178Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit-password.2roF6.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e49842149fd426f3c8df8a852f6635f","sha1":"cbfd2e44e70c91e06905b2b1119bfd717eefff51","sha256":"018b84750a752132714f1df8bc21783da97eff315d76e032a641cea6028cedf7","sha512":"b9aef3cacc8ab9c5e76b9b13c71aa06767122b44d7d17c598149b9817a990bed0685938b97481368da29d37928002ab89d4dcfe56cc0ee6b343cd0758d49f82b","ssdeep":"96:IXBLIYIQW2XLGvtqlZYK9iIRauYyHmddIVcq6Ss515Dl3k7yvWLzr9FwB8nIBRQq:IXhp9L/wK5sLdQeSmvIzuhs14/P64","tlshash":"f0f1fe50e39808375ab1f6fa0464a2c477aad87b84472dbe3cb4c9dc3277e570125ab3","size":8172,"data":"","first_seen":"2023-03-07T17:29:23Z","last_seen":"2026-04-06T12:51:05.318695Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/jquery.4YQe3.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"512729daf8ee9b5349c57013fb005fb2","sha1":"cb21585dafe13aa43a6ff5daff019a3bed0f7470","sha256":"3ef0b3864c82f5f3a751adceed2d2998f7a13147ff3450b2cc161e8b64e6b180","sha512":"14b596255b0bb06c259f068045fa64c509a58457f300e158bf9aef9aba40349c9eda04f410b6eb018772fea04ab6b5b5f1742b1fef7c9e5e6256392244f863d5","ssdeep":"1536:Lg2LGLupvxBavnQYTkPJjoMkxfEIWKUdnBN4sO9ClNZJf/xS+s2BB84:FmkPJwgXl4sxPcMB84","tlshash":"ee8309dd72c6b02247a770ba007f550bf236199d280d8450f169d8e9bcb5a8e827bf7d","size":86221,"data":"","first_seen":"2025-03-17T01:13:48.375574Z","last_seen":"2026-07-25T06:53:10.628634Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/device-proof.28IRE.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73c51f1ebe80a5106ee6d61b0507201","sha1":"8cb31306be602d71303a202f206af825be10b27f","sha256":"21c969eb0240b3c19cff18f5ed00f661aea9c9411d388413b79993c6d6fc6fa1","sha512":"9340085c67e1e72d66f7d37e7cd5d1f3638211b7df3669316139588e35505ecda6bdcd8787cf389efbfc797ee9baa88fcd0ee39e13a1380a42292f043a4a8449","ssdeep":"","tlshash":"5e51659e7e71b07a62a224b7645f550ae1b35e16a80a44e0f1426d403cfdf4d83b7ecd","size":2910,"data":"","first_seen":"2026-03-01T12:20:00.234889Z","last_seen":"2026-04-06T12:51:05.429421Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/srp-client.2EGmD.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f22e99b2868941f4cc3dadce5bb2e1ef","sha1":"5e5f3d0ad5a4861c3a8d6730ca5f10ae8a059847","sha256":"ae3ba33aa4eaeaacd4aae1dc34b9a640796c2d90dd4b580fafee7b4aff106596","sha512":"e14527f1d1b24be21a7bc4b010ca3505c5da69d49269ce8ab89c7ffeee3949c701de2d00b0ead3a86e175c618804c319951859222c7d3945e9f1a68d4c8e25ac","ssdeep":"3072:fB2w8RRwI8BKjYz362yPOmadogByp162eC1R:J2w8wI8hHrBy/HD","tlshash":"da24d888bad5b03503a365b0412f510ef23b6a69744d84e8f279c8e2fcb598d517bf78","size":209613,"data":"","first_seen":"2026-03-01T12:20:00.151444Z","last_seen":"2026-04-06T12:51:05.311861Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/cookie-consent-filter.22rFm.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"228c4207bf6a0150c8c38fa1e01e8d6a","sha1":"7fb321f07fc1810619bc32a52b0865e4136ee48b","sha256":"b3ed966012572ba0e3996b92385065732872cb50bf9b937e6a016a739ba37369","sha512":"5555a5b200f1e5cc1d8d31b2c6661dbf6f4e950a16c24d4e1b032b3e5ace179a2ff55ca2a584838728edc1375f02dd3628ad957383e7e9f55d943503c758dc98","ssdeep":"96:niTYJvexaC2wvKrLHmI3ug0YwheDvVTr+UrFO+UXnO9A2/syl7lfrrGvrbrR/54F:niC2xZWT9odIdr+UZHUXncA2kyltGXq9","tlshash":"aed119fa71c0ba70837781ba232f92b9b13515c468d980b4a50a99b07805ddbf723fd7","size":6503,"data":"","first_seen":"2026-03-01T12:20:00.222108Z","last_seen":"2026-03-01T19:57:08.292168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/global.0thEu.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"509777d1b91cf95400e0049cb6b0a088","sha1":"3c74e247ab55511fa9ac689ec0bbb299355ac60c","sha256":"b1d0873e4e6af7208a0d03583fdd8e282af8ccede08ebf964940c1bd797e78b8","sha512":"5d995dbe822cd8401d6ce803c250582b925dc0392b1ea324059773ee4b98be9fb13aa39bad51333326ec9971967277bde4187d4ff7e51cd0a21e4dce48dc36cb","ssdeep":"","tlshash":"c981b53dbaf170a6053b4565631b260570333cb699069d4496388cf269bae0f129beff","size":3923,"data":"","first_seen":"2026-03-01T12:20:00.242417Z","last_seen":"2026-04-06T12:51:05.409495Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/footer.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"657d05c3315a5bdfe8b33398d9b66fe0","sha1":"2f368e3f74c2f49eeec2ca1f5b4a1be845ff10a8","sha256":"0d741a509889dc1a6c95131dc887f6f51337c81b5928d0bd257489e0afaff67e","sha512":"ababcbd848a3b7f7a5b12852ffc065f643583f6f6ca11b700e01d0d78a4ecb4e83f8761dc531405cf19a98d7026b7f9a7124683fc37f1f4f40dc40cd54208333","ssdeep":"6144:P/a0WLiO9I2lYEggMvWSaPsBq+LZlb389dNPS3JRLdyLNGFPcc:P/y9I27EBq+6KZyLNGFPcc","tlshash":"12544b04f140f0b65a7708bdd66bb212e22a1446ee054ae5f1efe5902bdeff94053f26","size":287955,"data":"","first_seen":"2025-11-01T10:35:58.475222Z","last_seen":"2026-03-01T19:57:08.333591Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c7439117dd16c8e348c4ae95e279e9e","sha1":"310794461d12efdf5b3ad7af81db788f5222ba0e","sha256":"4f44593878f57c5f95ae17f643c139cc606c34e5e5876d791240959b3a9d6d4d","sha512":"bc5898d37de265e033a6c1821bd6f2bf6b229257d51f24e8ad61b96ae09f7662dc98e55c93b8ccc3388fc847ab9eb2c63ec114c3e4040a991867aaabda0824cd","ssdeep":"","tlshash":"222154cd39d630bb021f6537e87f7b0032321d00764ae852de2e816618a869a8f12e45","size":1226,"data":"","first_seen":"2023-03-07T17:29:23Z","last_seen":"2026-04-06T12:51:05.488687Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/login.2Mwsw.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fba9fa232bedd401c562d9824073a9e","sha1":"4339e4ef11a356ec9a7b6f52a06dfce529486c55","sha256":"849e915326261fa38edd24638d8aa7ad9b914ac60ad7757d9c5d2f60c3c7a352","sha512":"09bcda09c35ad83edf715c5f46f02864f7b77b02675a86e23bc227f0e56ca18d680ddd74fbeacdfde218e803c0c5234b3d53d1c4146ab7ab0bab5b671d905c24","ssdeep":"96:Fc8nNfZim8CMEwdvLDzy7WARQ9aG1e6u2GvBM3qgRR0gWEK+c:Fc81MEKKfRulnAvBM3Zv49","tlshash":"e891435571a16ec79a6bb3b9202b21059026b831d54bc4ad743888da4cbee4f3123f3f","size":4423,"data":"","first_seen":"2026-03-01T12:20:00.211763Z","last_seen":"2026-04-06T12:51:05.288562Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit-checkbox.0VjIo.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfe4c31bbfe5e0bbdb64b9e422c029c","sha1":"1d62c274580bbdace53caec5ba5eae8abe983a56","sha256":"2108cc6748355e570da837a1826e037ae1427791d7b72e670fdabc7c54ac6f58","sha512":"41a8850ac15be7dd9c03c9a987d79136e3e30fc3cc1e2b40d50422e15c41aac79c4fb97407d1c4574de92705dfb66975245af4113f69b4c8fdeca7debde2d15c","ssdeep":"","tlshash":"e4519f2bba652663657f20d219ab458d347507baa743083bb4d984e129fcda4323fd3c","size":2686,"data":"","first_seen":"2026-03-01T12:20:00.164719Z","last_seen":"2026-04-06T12:51:05.387269Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/srp.4JNsW.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e6f64e5b6b368fee650311c20639978","sha1":"5451af62cecfb311e53d7ae2d6036963860ba2d5","sha256":"448cfa9de33e9cd4f95749d70e6165a636a3a52578007f5613ebeab7bd0ce6e9","sha512":"9e141fdaab5ca13a169c21735334f4dd31447534a38bf44b2a58666913c7a2397a2ffd58dab899ec04dc529716b3d3bf62947eeaefbe843d5afa5efac6c535ab","ssdeep":"96:P1LGCdLROtBkrD0dnWjKNw/DYmffFEzaB2PwK3CtVtD1Ly4GNUSWg9Iv:BHLUkbbYmffLczCtVt6tI","tlshash":"60a163003480fd6f024e63b4b4c3b512a831154486b7d449fa2839db57aacca7e25f7a","size":5043,"data":"","first_seen":"2026-03-01T12:20:00.153712Z","last_seen":"2026-04-06T12:51:05.299479Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"microsoftbattle.net/static/picture/sprite-24-red.0Ocpv.png","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.007Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/sprite-24-red.0Ocpv.png HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Sat, 31 Jan 2026 13:15:28 GMT\r\nAccept-Ranges: bytes\r\nETag: \"4b1a2fabb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 65667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":65667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 720, 8-bit/color RGBA, non-interlaced","md5":"cd6dbf62532a68a06c4e428c846e1cde","sha1":"3e614233c4cb44f2d1cee55e30f839676f5190f7","sha256":"c085daad72859306183b524f41da557a66ae6deb197dc908d227dcf60ca505e1","sha512":"31c46ab2a00909e704b5dea221e9ee513a5150f98d61c3d74e7bfb5e13d6ce4a9ff45479b0dca78f6e9a8ae05a8ef8a6c884e6b77adfcff5e5eb02880357083b","ssdeep":"1536:M9HIfBFwtHAJf8g0xbjiwp52wZVwkGjflpRQEY:SHI0lQ0gqjiXw45jfl7w","tlshash":"0353020ed57365390d027c4b224395a91a1f66deff64e8c590d9b40f29233fda8af489","first_seen":"2026-03-01T12:20:00.133611Z","last_seen":"2026-04-06T12:51:05.356874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":1789,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit.0r0f1.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.957Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/toolkit.0r0f1.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"27dd94b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 267763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":267763,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (308)","md5":"0271326e94629839ae1d3031817d4cb0","sha1":"efcd9c46d02124c82206300c6bbefa8f7381bfff","sha256":"800be1a2dc0eb5d83647a791d17f0d0e5e306b0b9ddf09a203d6913e483c0090","sha512":"909cbf2c0f2f2ffa39b3a57390b988b813c57c9fb899077376124eebcf3f5b40a8e1606852978899e1d8ed7d7695afa1c4d960d3a33a037a432fff4647c8b226","ssdeep":"6144:VwjY1DaQEyhDdbJlIpnsWLyWwabo+uiPfjf4nvSDA:VDalzkvSDA","tlshash":"93449349b7ef2122417771ba4e5f5189b23d803b594a9c297c6c82e42f9483843f7fb9","first_seen":"2023-05-25T06:55:49Z","last_seen":"2026-04-06T12:51:05.282603Z","times_seen":19,"resource_available":true,"data":null}},"time_used":1528,"timings":{"blocked":141,"dns":1,"connect":153,"send":0,"wait":154,"receive":1079,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geo.battle.net/","fqdn":"geo.battle.net","domain":"battle.net","tld":"net"},"ip":{"addr":"52.84.50.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 20 Apr 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:2A:93:DC:9B:D5:F3:1E:5B:52:99:F2:FB:02:29:C4:07:9C:60:2E","sha256":"07:5F:AC:74:6F:00:84:34:CF:60:0E:47:DB:0B:26:19:20:F7:2F:EA:5E:33:60:DF:02:86:6F:FE:93:5D:A9:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: geo.battle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\ndate: Sun, 01 Mar 2026 12:19:31 GMT\r\ncache-control: private, max-age=86400\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ep8N_y02jM_wcpvVxPAXcaNhd3rj7qANxIWE6asVuEn-DdDg27vTqQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ecca738c04bebe95718e7004bfc4a15c","sha1":"38d46b82cb8d71be9ffbb38be4c839b3b3e89421","sha256":"5af890f630b205c0353e8da798d3e9c2d4a0e159a4771a85b2b5ce55e2f02aff","sha512":"74b5adf98c68c781116deec59957508b9f8030d3ae5f53e5023b92974eedede8d1a48a56af6b257607407ec38edd132ff5c39907f666a4177cfcf6e64d8cf988","ssdeep":"","tlshash":"6990027e205b4758ba24a37839527401445d975043121541d0c63b85c3111d98401545","first_seen":"2025-06-27T18:49:40.549528Z","last_seen":"2026-06-24T22:12:39.806392Z","times_seen":13,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":80,"dns":72,"connect":1,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/gtm.js?id=GTM-589KTQ","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.903Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /gtm.js?id=GTM-589KTQ HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 1163\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b95f02d7712377499e60763a74069631","sha1":"2a6ea7a8c7353bddd6bd7b487842da1feaa525cf","sha256":"5da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68","sha512":"03e939b8cb16223055781ed96668e3426b9eec6c747da9d4071cd0144c218a9e5f725a5bc2fe6e9ba8da1795386ff08434050aa69bb67bc85029ab09ab394ba2","ssdeep":"","tlshash":"f621201992b05d50e65684a070f2b3ea3a4b8646f48b0b99e422722fd8c256290df384","first_seen":"2025-04-07T01:16:36.738328Z","last_seen":"2026-08-04T05:03:45.309467Z","times_seen":5952,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/object-sans/ObjectSans-Regular.4Bfgc.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/object-sans/ObjectSans-Regular.4Bfgc.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 34024\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 18 Aug 2023 19:43:53 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20639554\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34024,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34024, version 2.0","md5":"dbf5548e94817abdc8adb09fb82bba90","sha1":"b43d597077795d8111dc4074b8c5be49211166d3","sha256":"6d6e950f0f5fed631c4f879026db7fa3a4a2021af600c3b1d7d3a3cb9fa7ff72","sha512":"812f9279d3486a0935b45dfafed4559a5774c049d2340bc526d5cb36af3fa129cb87a1a79a91f89de27532d40eeefd5af3969c19749761b51678eb835dbc144d","ssdeep":"768:IpKBRgqRMmT2L5tv61DZ/nu1Gq/t2bkDA5twX3mIPkP4Mde:hRgqRMO05tCXu12pJIhMQ","tlshash":"d9e2f21ece781103d7db9d2618663382c9ed5b5788626b24150dce2edcafb3049dc7a2","first_seen":"2026-03-01T12:20:00.14462Z","last_seen":"2026-04-06T12:51:05.350551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":104,"dns":33,"connect":0,"send":0,"wait":4,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/picture/favicon-16x16.png","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.570Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/favicon-16x16.png HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Sat, 31 Jan 2026 13:15:27 GMT\r\nAccept-Ranges: bytes\r\nETag: \"12d1daaab392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 909\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"dd783b3be588f0def3d863efd083c555","sha1":"60ea2baf0e61cefb86a751dbca4bcbb4d8ed0172","sha256":"7db9e715f91d1bc609efd7c26a5ee28545fe3b88247535e899f9496a5942e000","sha512":"3e6cab71ebd13405cbb34945441dde2c5158e7ee5e91db6d21fa1e46f6a5f6fea11721e91a1949fdd8cf1fcae9407fc0eca24efb0ab0ce90886ba62420bbf036","ssdeep":"","tlshash":"41110cdf5298cc36cbad126662e08394fe38302e228e0812a82577f228152590014ed3","first_seen":"2023-07-24T11:22:02Z","last_seen":"2026-04-06T12:51:05.43324Z","times_seen":20,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftbattle.net/","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T12:19:29.962Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T16:58:13.439183Z","times_seen":17710995,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":334,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/srp-client.2EGmD.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/srp-client.2EGmD.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"f19891b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 209616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":209616,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f22e99b2868941f4cc3dadce5bb2e1ef","sha1":"5e5f3d0ad5a4861c3a8d6730ca5f10ae8a059847","sha256":"ae3ba33aa4eaeaacd4aae1dc34b9a640796c2d90dd4b580fafee7b4aff106596","sha512":"e14527f1d1b24be21a7bc4b010ca3505c5da69d49269ce8ab89c7ffeee3949c701de2d00b0ead3a86e175c618804c319951859222c7d3945e9f1a68d4c8e25ac","ssdeep":"3072:fB2w8RRwI8BKjYz362yPOmadogByp162eC1R:J2w8wI8hHrBy/HD","tlshash":"da24d888bad5b03503a365b0412f510ef23b6a69744d84e8f279c8e2fcb598d517bf78","first_seen":"2026-03-01T12:20:00.151444Z","last_seen":"2026-04-06T12:51:05.311861Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1320,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":155,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/srp.4JNsW.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.021Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/srp.4JNsW.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ee778eb8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 5046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":5046,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5043), with no line terminators","md5":"4e6f64e5b6b368fee650311c20639978","sha1":"5451af62cecfb311e53d7ae2d6036963860ba2d5","sha256":"448cfa9de33e9cd4f95749d70e6165a636a3a52578007f5613ebeab7bd0ce6e9","sha512":"9e141fdaab5ca13a169c21735334f4dd31447534a38bf44b2a58666913c7a2397a2ffd58dab899ec04dc529716b3d3bf62947eeaefbe843d5afa5efac6c535ab","ssdeep":"96:P1LGCdLROtBkrD0dnWjKNw/DYmffFEzaB2PwK3CtVtD1Ly4GNUSWg9Iv:BHLUkbbYmffLczCtVt6tI","tlshash":"60a163003480fd6f024e63b4b4c3b512a831154486b7d449fa2839db57aacca7e25f7a","first_seen":"2026-03-01T12:20:00.153712Z","last_seen":"2026-04-06T12:51:05.299479Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1114,"timings":{"blocked":953,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/apple-logo-black.067En.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.942Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/apple-logo-black.067En.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"9765c6acb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c5ee1861f4c0f914a777adc7d41352f","sha1":"d811770bc9edf64a276d8fa75c2f9fd5cf7cc790","sha256":"6f567be012275ec8913d11ee6ecf671fb20bfb177b7943e0f2ac955a1b2a3b0f","sha512":"7e39acd191ed3664d54a1a2d52c1d0d11adb67cf65b2db404e83209a33660ecc6005b3f15b094e603dc319a074aa0870a1b4590268ff5fa3128eeb20f0556b76","ssdeep":"","tlshash":"ae0115cafff49538c98193ef1128ccf4356674d83421c354cb9e0d456552dc45e8615e","first_seen":"2023-05-01T21:53:22Z","last_seen":"2026-03-01T19:57:08.362669Z","times_seen":33,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/xbox-logo-white.1pMH6.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.943Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/xbox-logo-white.1pMH6.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:31 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1329cfacb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 1128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15d7f087c0b46073577812d1fb1e2ab6","sha1":"07f05d1d04205b7e2b305b7efb1f57b14cbfb6c1","sha256":"53bbb62a0ab6d8eb91654251f85cb04a571e06c6ec11584a0c4eed9ced77a959","sha512":"bfec3ed4d683bb98dca975a019c5401d992d027790da0dc7b7607f67bc0ad5bc418db90145a47618205c4e7d42f5a6fa02f6b2d5c7d068d1ff5f1367d2642384","ssdeep":"","tlshash":"d321be2cc294d3f49dc6d7780a3674b81c8f86dea4e0a3ae85148e7076654dc625c8d6","first_seen":"2023-07-24T11:22:02Z","last_seen":"2026-03-01T19:57:08.342818Z","times_seen":19,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/noto-sans/NotoSans-Regular.2aXeg.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/noto-sans/NotoSans-Regular.2aXeg.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 360552\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 18 Apr 2024 21:59:28 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=18981824\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360552,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 120148, version 2.0","md5":"58b6a7dc07b638276bb32614299da7f2","sha1":"f29ecc5d3ea0d97b2630385498a3db0d00d524fe","sha256":"cf262f776900cf2de9ee91f64453f874b8408c061361e2133b915fbd42f080ee","sha512":"f816448099f656c48de74f43182e20028b30fa8f7b32ca035bc46a4f5c4e6ce56f39cae7195a137fbaa04b41d376226ee765afc6adcb0f920f2e1d08b6c51e44","ssdeep":"6144:L0T75JE85cw7UAilH0T75JE85cw7UAilK0T75JE85cw7UAilH:gPjcpAiGPjcpAi/PjcpAi1","tlshash":"c9741250831f1a0accf9a73313af11bbb7d44f6c8adf64e1bd9d06aa2e12059551d07b","first_seen":"2026-03-01T12:20:00.162375Z","last_seen":"2026-04-06T12:51:05.341886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":95,"dns":27,"connect":1,"send":0,"wait":5,"receive":12,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit-checkbox.0VjIo.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.023Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/toolkit-checkbox.0VjIo.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"15ed8eb8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 2689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2689,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"9dfe4c31bbfe5e0bbdb64b9e422c029c","sha1":"1d62c274580bbdace53caec5ba5eae8abe983a56","sha256":"2108cc6748355e570da837a1826e037ae1427791d7b72e670fdabc7c54ac6f58","sha512":"41a8850ac15be7dd9c03c9a987d79136e3e30fc3cc1e2b40d50422e15c41aac79c4fb97407d1c4574de92705dfb66975245af4113f69b4c8fdeca7debde2d15c","ssdeep":"","tlshash":"e4519f2bba652663657f20d219ab458d347507baa743083bb4d984e129fcda4323fd3c","first_seen":"2026-03-01T12:20:00.164719Z","last_seen":"2026-04-06T12:51:05.387269Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1165,"timings":{"blocked":1009,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/google-logo-color.3heUj.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.937Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/google-logo-color.3heUj.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"9765c6acb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 699\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30906187a7cfcd5f4ed803fa05f1ca2c","sha1":"5aec64f172c1984d9cd61460fdae7ba105e6faee","sha256":"cb4a54ba280d5059213494d6a86d50c7a71e586375bc90a352f8ff5abf93a0d4","sha512":"aec8ef1471cc5c586dca20962e2a0f503875b1634c376b321299cb10bc4620ab352430a44842ae3109fc6840a6c9682027cacafd7945b1dfb4f7c2acc8df43ce","ssdeep":"","tlshash":"7b01cbbcd3888b389d80c3a09fb821b055bf05daf4402398a842857c75878dd19bd8ee","first_seen":"2023-05-01T21:53:22Z","last_seen":"2026-03-01T19:57:08.354955Z","times_seen":34,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/noto-sans/NotoSans-Bold.4ej6Y.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/noto-sans/NotoSans-Bold.4ej6Y.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 352272\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 30 May 2024 10:18:54 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20601258\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352272,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117388, version 2.0","md5":"78b6d5828f9919a6ef4ad24ac3c0b654","sha1":"f6e05d6aefe89bade6c8847d743ec94ee962aa47","sha256":"730dd5f86fa93db789a3cba3d182af93074f3b492927a21b9c4dea9e0cdd199d","sha512":"8452543a61e7595cabef7c860eab52cacc78c1e9ca61a4a289cb2e0facc110e400d4cbf6cbbefc3c4d5bd3df5cb4ab5a9973e20b58a3bcaf017202d6179e2848","ssdeep":"6144:6Jim/KxI/hpBoxi8zyJim/KxI/hpBoxi8zLJim/KxI/hpBoxi8zF:6Jim//nBOiQyJim//nBOiQLJim//nBOb","tlshash":"e274126b1d1d0fd1d1f4247089a8f025ab02989beb1e91e3f6c5045485a38f3d6be6af","first_seen":"2026-03-01T12:20:00.168589Z","last_seen":"2026-04-06T12:51:05.410738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":112,"dns":22,"connect":12,"send":0,"wait":7,"receive":11,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/instagram.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/instagram.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: tPgw/PpmeEy3jSqEsXiKYz/U+Uny1a4RB+OIqoXYR7Dqo88i1rbTSuqIpqiZ0V4mVVCBtSwwiKT+e0ZVHenoOzW/NEiW9Km5bPf4/J2QVDo=\r\nx-amz-request-id: HXZVGWDQJ4EJN48Y\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Thu, 20 Nov 2025 22:41:52 GMT\r\netag: \"dfc4dc54ed94a2fc0d39db0ce5c1ea1f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 1805\r\nserver: AmazonS3\r\ncache-control: public, max-age=42258\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1805,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfc4dc54ed94a2fc0d39db0ce5c1ea1f","sha1":"e42679716de59da0cd2935502337bc1579c5aa35","sha256":"c0c2900f983534a1709cbaff8ff47ddda2dfc419193b67b7f2aaae753dc70e27","sha512":"651a1df13711ff21df3ca722d8fe1b527a56cd904e74ef02909b8bd6babb3a6054e251f3b4457b476c60a8de01b2f77cc073f6e7730c9f80668885e99e2bd23f","ssdeep":"","tlshash":"fd312e6543b80aec648b6cbdff3514b91b8f717a726e28e0aa5c1a780463d8cf1438d5","first_seen":"2025-06-28T07:54:18.750388Z","last_seen":"2026-03-08T03:07:40.014703Z","times_seen":22,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/chevron-down.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/chevron-down.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: /bDRUa9UfT7nv9fomjKY7Thf+9sakwlQ0yEtQ51UQ9nj7RINtjniw7VbuyxIqwyfDB29WLvrTuE=\r\nx-amz-request-id: D7MSXMTKKN3BPTMC\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 09 Jun 2025 18:38:48 GMT\r\netag: \"782444d7d888f736aee236d8510766ae\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 188\r\nserver: AmazonS3\r\ncache-control: public, max-age=78780\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"782444d7d888f736aee236d8510766ae","sha1":"f04c6fd5851685bd2c5bbc12c8418d8506d8b549","sha256":"9abddaa4fe92ea52d530c5a8640ce911621c66b2b992eab7493a8f6298023f8b","sha512":"fb84b0d59c50d7c93fff46ae5fe7523bdfd5d231fe684305bc0ecb5c28eafb2d57cc7001c165bb889423aa6a563becf8da932f4cbcc257bf84a3b8d280552889","ssdeep":"","tlshash":"3dc0121a63280c2cf4664564e7793735017a1283254c112c986515356105acdb53b9e4","first_seen":"2024-12-08T09:07:53.516436Z","last_seen":"2026-05-07T03:21:18.314513Z","times_seen":25,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/object-sans/ObjectSans-Bold.4MlbQ.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/object-sans/ObjectSans-Bold.4MlbQ.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 36768\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 17 Jun 2024 17:08:38 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20598188\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36768,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36768, version 2.0","md5":"34ca58f10bae275f462d47730ee95018","sha1":"0e71ec5be4470e1346dc14d260a5654372f043a1","sha256":"09d6f41235e63ee2ba957f5540da527679ab72b81e2995a200f645e37a1f7fdc","sha512":"4040921d435dd9323b903458b4866cc400667011e26df579952cf454b55d8afd3288465b4b9dc65b3680bb56e45676d9a8d2f689c835237184b584dbd5780ecb","ssdeep":"768:/qTeJ6Z71ZrbvFA+ZrKcNoUj4NAFvb52GQD5/60vSGFL:pSBZHvFACKcz1bA5iYl","tlshash":"faf2f104e660f17bd7bd913e52b3c9926ea31c10d8790aa41587d3b0df191c38dbe6b8","first_seen":"2025-01-05T18:11:46.838217Z","last_seen":"2026-04-06T12:51:05.340664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":93,"dns":29,"connect":1,"send":0,"wait":4,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/embed-0.1.5.min.2QnZN.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.017Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/embed-0.1.5.min.2QnZN.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"35ca8cb8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 2001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1998), with no line terminators","md5":"b36847b3a70065314863dfe44fe2999a","sha1":"fad27233fb310c253100c018edba737859f29dd3","sha256":"4906250859322a4d070a2e056d511927738d228ea180966b8697ef3043bc9430","sha512":"a4c3f6f18e9b4e07cf532a055f0f927e56d24bb13ceef73d7bfc0948ee30f5b801900468694950ee2d7c4bd5a8925fa3b956b31b6f042745c6a612c1ab93f994","ssdeep":"","tlshash":"1541f1da72c3f0b8e64b632154af665bb73aa8a5180da054d658c0907df4e0dc437e8e","first_seen":"2023-03-07T18:42:57Z","last_seen":"2026-04-06T12:51:05.384178Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1005,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blz-contentstack-assets.akamaized.net/v3/assets/blt72f16e066f85e164/bltf67d0bdf684e23b3/ObjectSans-Regular.woff","fqdn":"blz-contentstack-assets.akamaized.net","domain":"blz-contentstack-assets.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /v3/assets/blt72f16e066f85e164/bltf67d0bdf684e23b3/ObjectSans-Regular.woff HTTP/1.1\r\nHost: blz-contentstack-assets.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 42456\r\ncontent-type: application/font-woff\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-request-id, host, connection, x-forwarded-for, x-forwarded-proto, x-forwarded-port, x-amzn-trace-id, origin, sec-ch-ua-platform, user-agent, sec-ch-ua, sec-ch-ua-mobile, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-dest, referer, accept-language, priority, x-akamai-config-log-detail, akamai-origin-hop, via, fastly-ssl, fastly-client-ip, x-forwarded-server, x-forwarded-host, x-varnish, fastly-orig-accept-encoding, accept-encoding, x-timer, prod-blz-origin-token, x-device, fastly-client, fastly-ff, cdn-loop, x-envoy-external-address, x-envoy-attempt-count, x-forwarded-client-cert\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH\r\ncontent-disposition: inline; filename=ObjectSans-Regular.woff\r\nx-contentstack-organization: blt40123efcce0dbcb9\r\nx-runtime: 83ms\r\nx-request-id: 9fccac5ad964b63d5f75c776c77f7832\r\nserver: contentstack\r\naccept-ranges: bytes\r\nx-served-by: cache-bfi-krnt7300084-BFI, cache-bma-essb1270024-BMA\r\nx-cache-hits: 12, 0\r\nx-timer: S1753393054.404307,VS0,VE145\r\naccess-control-allow-headers: content-disposition, content-type, cache-control, content-length\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=900\r\ncache-control: max-age=11864641\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.92,b=584296954,c=g,n=NO__OSLO,o=20940]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42456,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 42456, version 0.0","md5":"90cd3f3dd38cccd947f36ae6748d6ab6","sha1":"6c34ad84dcb603ee0fb40fbe48fa65a64d5e4323","sha256":"74731786eab9cb8bac9806b50168ed85e1e9664946ff0e58b812c836f90a143a","sha512":"334b335705391159f3e26294622e4dfa834d81d8cb3438e64a38e7073f514e4fddab87b704b966a859f7749a437c12aa2c08d883a6ddc65fad35bb705065322d","ssdeep":"768:np0zU2wlNHlTrSwBnZOiiPx8+MLDO/tICi06li+dumUBsw7RRaeAkcUN+4rugiz7:yz21ewBZOdx0LDo5+i+AmUBf7RDABf4G","tlshash":"b013f135a70d87d3fcde5e38305a6f28cb51f561254fdd4ab72816855f0f6a10784235","first_seen":"2026-03-01T12:20:00.187406Z","last_seen":"2026-04-06T12:51:05.403342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":6,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/bn-checkmark-filled.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/bn-checkmark-filled.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 2xLFasZkRAypuuf/5tQhQn0tuBc1vpoRvaOstLYLcXziE7ibQj+QeqrROpu8r3npjeQOiEkbldg=\r\nx-amz-request-id: EAG3551V482NCXXZ\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 09 Jun 2025 18:38:45 GMT\r\netag: \"bbdf8fbbcd0268b9d7ed2e4cf05efbd6\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 292\r\nserver: AmazonS3\r\ncache-control: public, max-age=50135\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":292,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbdf8fbbcd0268b9d7ed2e4cf05efbd6","sha1":"0c4ab0632fb93f08052145a1ecde0a7bcb8e928b","sha256":"d038b19ac705bb925f82212cdaed282a04f23c219e5112d564a5e4dd488aafd1","sha512":"cf38d11c02b5df6daf440a88fcf1ccc7790da4612b14827ce593e54f7d78f7ba59f332416074ed71a7cc2b72c291b3b8b7f729dee7ff3a305eeefdb1cf5dfa6c","ssdeep":"","tlshash":"9be0c2cd1039a84cd1faaabc7737a3741f0f24b83344c0089c4f0f8f5128145e293464","first_seen":"2024-12-08T09:07:53.519534Z","last_seen":"2026-03-08T03:07:39.882532Z","times_seen":24,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/css/bnet-next-web.4ZMBi.css","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.949Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/bnet-next-web.4ZMBi.css HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ef308ab8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 481754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":481754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8f0403788e8a13fa1655baeff768544a","sha1":"1e18db95f71988141b83b71ed0bac5ede59162cc","sha256":"48a75b8b16af2c36bf482e6b084509c440eee94e5b6d5414fa467e58f714291b","sha512":"b8ebd1a2435cd9b6ca29a5d1331b970c50e858a263793f12ce20e01f3ee0c9fdf230a916116f0de3c76ac78b01ba48cd6139be55fdbbfe07f8404cd8c5eed743","ssdeep":"12288:Af3karSszYQIuFbgB22t8VZ5/YvgV6Tpe:AcarSuN","tlshash":"e1a433a996fd69102747c1d432829671bb3d611acc1f6d6cd2b738acbac45c1c2a3bdc","first_seen":"2026-03-01T12:20:00.195124Z","last_seen":"2026-03-01T19:57:08.356955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1847,"timings":{"blocked":762,"dns":0,"connect":0,"send":0,"wait":154,"receive":931,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/switch-logo-white.2Io3T.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.945Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/switch-logo-white.2Io3T.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:31 GMT\r\nAccept-Ranges: bytes\r\nETag: \"9ecaccacb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 1200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04d8b8e7d4c6362cb5527be2df66f23c","sha1":"75655bcb198f8e16d84739bd421a177e886e6fcf","sha256":"0d787d8388f2622e9a714434289703e569379cec7932a872b6e1f1f729a57fce","sha512":"430baf32a9772efc9085f4527ad56872e113447bbdb4c3963c2c31fb9ef89963d8fe9383ec906ae25e68158f0aaa33cf3e069eccd0a38bb3c4a983e4317b3119","ssdeep":"","tlshash":"832187a1d01ad0de4f05c24c4dfada82536dd21b412c0469d2ff4d60480bd7bde06d51","first_seen":"2023-07-24T11:22:02Z","last_seen":"2026-03-01T19:57:08.283166Z","times_seen":19,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/footer.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/footer.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"17f796b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 287958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":287958,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (34634)","md5":"657d05c3315a5bdfe8b33398d9b66fe0","sha1":"2f368e3f74c2f49eeec2ca1f5b4a1be845ff10a8","sha256":"0d741a509889dc1a6c95131dc887f6f51337c81b5928d0bd257489e0afaff67e","sha512":"ababcbd848a3b7f7a5b12852ffc065f643583f6f6ca11b700e01d0d78a4ecb4e83f8761dc531405cf19a98d7026b7f9a7124683fc37f1f4f40dc40cd54208333","ssdeep":"6144:P/a0WLiO9I2lYEggMvWSaPsBq+LZlb389dNPS3JRLdyLNGFPcc:P/y9I27EBq+6KZyLNGFPcc","tlshash":"12544b04f140f0b65a7708bdd66bb212e22a1446ee054ae5f1efe5902bdeff94053f26","first_seen":"2025-11-01T10:35:58.475222Z","last_seen":"2026-03-01T19:57:08.333591Z","times_seen":5,"resource_available":true,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/logo-horizontal-color-light.1z1fI.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.929Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/logo-horizontal-color-light.1z1fI.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/bnet-next-web.4ZMBi.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:35 GMT\r\nAccept-Ranges: bytes\r\nETag: \"a6f230afb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 3703\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":3703,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6374066f4058cf252867c71a3926dddf","sha1":"5b85893fe47276fa5addecd87c63182136a8fecd","sha256":"4537fe0a4ae5be6136c79b781ac2cc7d6137d60024203154c96d2c6675106d63","sha512":"1b6acdfbb8a56fa537e99ad958049ceedebe250ea081eac36ba29ce9b91c9406fbf001c5b3d0921e6590ef82e7854eed0a43ba6568c8e5156903b3bf7aa3ecbf","ssdeep":"","tlshash":"4471127bd399077556850b1906a4646b36c2909e70f6f2ec8f67ae2bec0ebf38034d51","first_seen":"2023-07-24T11:22:02Z","last_seen":"2026-03-01T19:57:08.350901Z","times_seen":19,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navbar.blizzard.com/base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main","fqdn":"navbar.blizzard.com","domain":"blizzard.com","tld":"com"},"ip":{"addr":"52.84.50.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blizzard.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Apr 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:A0:01:8A:3D:B1:61:3B:C9:80:66:71:EC:0B:87:78:4D:C2:C8:EE","sha256":"42:1D:55:5D:1C:DD:59:01:B4:23:6E:A1:41:13:69:53:BF:68:5B:FF:17:25:A0:34:72:67:A8:2E:25:42:ED:EF"}}},"request":{"raw":"GET /base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main HTTP/1.1\r\nHost: navbar.blizzard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nx-powered-by: BWA\r\ncache-control: max-age=60, stale-while-revalidate=604800\r\ncontent-encoding: gzip\r\netag: W/\"210e-edsVzA7Ndw3N9oKbcggQA/hInnE\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: L9URMJ56d3JxViqdLWeI4h9ikFiENxgF1COdBfdKDllxduzurithuQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":8462,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"482eeb0e4cea549a1fb250b235490bfb","sha1":"79db15cc0ecd770dcdf6829b72081003f8489e71","sha256":"ac6e5446bf80c3e37a61890824c2a43c8dcf2b8734a79334b5126927c0eb4a6d","sha512":"5e351d41ca415029634ec69b79d127a894905d6dce43498509a100dd375fa15fcfe6e28516ab7376e8d2c9d69e0c6e705ffa7dbe7cd5d028b452da641bf2fece","ssdeep":"96:ezBAp9BMV10zQteu3yXPhgin4Nv/W0AVQso8UQalUdk8DfdKHqBjxdsnEjf6mO02:7B7TDjVjf6+HDjG","tlshash":"5d02022fe69d4c3d2b0d87c6e2860e0a62dc55827dccfd51d9acde5821d7ac462138bb","first_seen":"2026-03-01T12:20:00.203028Z","last_seen":"2026-03-01T19:57:08.289772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":42,"connect":1,"send":0,"wait":120,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blz-contentstack-assets.akamaized.net/v3/assets/blt72f16e066f85e164/blt84e47c58c9ac946b/NotoSans-Bold.ttf","fqdn":"blz-contentstack-assets.akamaized.net","domain":"blz-contentstack-assets.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /v3/assets/blt72f16e066f85e164/blt84e47c58c9ac946b/NotoSans-Bold.ttf HTTP/1.1\r\nHost: blz-contentstack-assets.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 212245\r\ncontent-type: font/ttf\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-request-id, host, connection, x-forwarded-for, x-forwarded-proto, x-forwarded-port, x-amzn-trace-id, accept, origin, user-agent, x-bnet-sso, sec-fetch-site, sec-fetch-mode, sec-fetch-dest, referer, accept-language, x-akamai-config-log-detail, akamai-origin-hop, via, fastly-ssl, fastly-client-ip, x-forwarded-server, x-forwarded-host, x-varnish, fastly-orig-accept-encoding, accept-encoding, x-timer, prod-blz-origin-token, x-device, fastly-client, fastly-ff, cdn-loop, x-envoy-external-address, x-envoy-attempt-count, x-forwarded-client-cert, x-datadog-trace-id, x-datadog-parent-id, x-datadog-sampling-priority\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH\r\ncontent-disposition: inline; filename=NotoSans-Bold.ttf\r\nx-contentstack-organization: blt40123efcce0dbcb9\r\nx-runtime: 233ms\r\nx-request-id: 68a28d2113b9add291f57a9e5400bc98\r\nserver: contentstack\r\ncontent-security-policy: frame-ancestors none;\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nx-download-options: noopen\r\nx-dns-prefetch-control: off\r\nfeature-policy: camera 'none';microphone 'none';geolocation 'none';encrypted-media 'none';payment 'none';speaker 'none';usb 'none';\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-served-by: cache-bfi-kbfi7400091-BFI, cache-ams21043-AMS\r\nx-cache-hits: 20, 1\r\nx-timer: S1688778281.537312,VS0,VE6\r\naccess-control-allow-headers: content-disposition, content-type, cache-control, content-length\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=900\r\ncache-control: max-age=716950\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nvary: Accept-Encoding\r\nakamai-request-bc: [a=23.36.76.92,b=584297013,c=g,n=NO__OSLO,o=20940]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398652,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2012 Google Inc. All Rights Reserved.Noto SansBoldMonotype Imaging - Noto Sans BoldNot","md5":"98f0cacc6bb63b64b98aac7cac082d27","sha1":"00a4dc42180951b52eb9797cb4d6f64527432220","sha256":"f9a6bd489df560f7a925b43d5b48d4536fa24589332e53702b63fc0072898f86","sha512":"f630eaa86ba1216b2a546bcf43f4917929df712aac96062fa702498e84adfb86a08c22a09bd123581a00c651ad7f580e2185f9e3826e384e48cd87e3b1f3a945","ssdeep":"6144:tYanQ0msXCpWvYEgn+mNTACxrPhBJjz3qmba/pAvN5CiUGof3nikXWd8aT76IzfA:9q3z9NlhLv+mvNpUZahzUBVFs7cf","tlshash":"9e845a07d367eb3ab91e75bec012db4316436110736bd24b286d42b9ad5e1bc8f90bd2","first_seen":"2023-04-07T11:07:17Z","last_seen":"2026-07-22T04:39:09.589739Z","times_seen":129,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":3,"receive":6,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blz-contentstack-assets.akamaized.net/v3/assets/blt72f16e066f85e164/bltce5b0dc26cb5413a/ObjectSans-Medium.woff","fqdn":"blz-contentstack-assets.akamaized.net","domain":"blz-contentstack-assets.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /v3/assets/blt72f16e066f85e164/bltce5b0dc26cb5413a/ObjectSans-Medium.woff HTTP/1.1\r\nHost: blz-contentstack-assets.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 46068\r\ncontent-type: application/font-woff\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-request-id, host, connection, x-forwarded-for, x-forwarded-proto, x-forwarded-port, x-amzn-trace-id, pragma, origin, user-agent, accept, x-requested-with, sec-fetch-site, sec-fetch-mode, sec-fetch-dest, referer, accept-language, x-akamai-config-log-detail, akamai-origin-hop, via, fastly-ssl, fastly-client-ip, x-forwarded-server, x-forwarded-host, x-varnish, fastly-orig-accept-encoding, accept-encoding, x-timer, prod-blz-origin-token, x-device, fastly-client, fastly-ff, cdn-loop, x-envoy-external-address, x-envoy-attempt-count, x-forwarded-client-cert\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH\r\ncontent-disposition: inline; filename=ObjectSans-Medium.woff\r\nx-contentstack-organization: blt40123efcce0dbcb9\r\nx-runtime: 121ms\r\nx-request-id: 7eaa8300b931d253ae32f5f264e37bb5\r\nserver: contentstack\r\naccept-ranges: bytes\r\nx-served-by: cache-bfi-kbfi7400043-BFI, cache-bma-essb1270061-BMA\r\nx-cache-hits: 4, 0\r\nx-timer: S1753393054.443859,VS0,VE147\r\naccess-control-allow-headers: content-disposition, content-type, cache-control, content-length\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=900\r\ncache-control: max-age=12560035\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nakamai-request-bc: [a=23.36.76.92,b=584297016,c=g,n=NO__OSLO,o=20940]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46068,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 46068, version 0.0","md5":"9a37a148d22fb6b3409e356e30e701fd","sha1":"76e39cb5ad4ecda083e5265132770a05ab745594","sha256":"f7e1c978be2fcba27898a511e4a261471c1b2ac9542c78d4c745772e560df14e","sha512":"463a5f5a0c2f5fae5fc98da929e8d658c7a5959ac06e5794ebb64176070e5b1ffa500e04f0b3c968d74d28facd626f2859e56cb3f6a2732542e4c0e379f8817b","ssdeep":"768:xvZnkPVzcQV4VozvUrOEeD+fmeyo8D0EW3ZsjrAETWhRuf2Rf11E7WmR4nT4ougG:RZnkPVo0LWwD+Jyo8oEW30rRT+Rf118P","tlshash":"7923e15bef0b66a7dcde07aa56243a16c9d43d30b15c4c39a23042762abf5b0dd8093f","first_seen":"2026-03-01T12:20:00.20514Z","last_seen":"2026-04-06T12:51:05.306035Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":8,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/jquery.4YQe3.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.955Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/jquery.4YQe3.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"696090b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 86224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":86224,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"512729daf8ee9b5349c57013fb005fb2","sha1":"cb21585dafe13aa43a6ff5daff019a3bed0f7470","sha256":"3ef0b3864c82f5f3a751adceed2d2998f7a13147ff3450b2cc161e8b64e6b180","sha512":"14b596255b0bb06c259f068045fa64c509a58457f300e158bf9aef9aba40349c9eda04f410b6eb018772fea04ab6b5b5f1742b1fef7c9e5e6256392244f863d5","ssdeep":"1536:Lg2LGLupvxBavnQYTkPJjoMkxfEIWKUdnBN4sO9ClNZJf/xS+s2BB84:FmkPJwgXl4sxPcMB84","tlshash":"ee8309dd72c6b02247a770ba007f550bf236199d280d8450f169d8e9bcb5a8e827bf7d","first_seen":"2025-03-17T01:13:48.375574Z","last_seen":"2026-07-25T06:53:10.628634Z","times_seen":74,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":140,"dns":1,"connect":155,"send":0,"wait":155,"receive":619,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/core.3efP0.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.958Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/core.3efP0.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"40ba92b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 101798\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":101798,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0f03255cd4524a82a7ab8016de258db5","sha1":"36c5e3979f1e0fdad9e86e2ea07f4d4042d26b37","sha256":"2ed3fe08cc6ec796a29ec6db95d0f734de472b2a966c5f3ceae12a3f5c500894","sha512":"3a256215e1a742e15b50b8d30737001d42587186f2249c4aa9d01d0b5ca01bd52305dc4acc7b73c5cb20cee610df4976c3150f184a7dc7ad0ed53c5c4999b0d8","ssdeep":"1536:2toK9xuXaGDYLfxxEFYsbXBNStjBS2oEx/WjjB4W2swzCmGpTV1lvvGBbFzQ47G9:o94xNStLuD2sQCmW8bFzQ47GK2","tlshash":"b2a319cd72c6b06257e7607a407f610ff2361999284d8450f125e8e9bcb4a8e523bf7d","first_seen":"2026-03-01T12:20:00.208197Z","last_seen":"2026-03-01T19:57:08.328711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1229,"timings":{"blocked":140,"dns":1,"connect":155,"send":0,"wait":156,"receive":777,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/toolkit-password.2roF6.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.022Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/toolkit-password.2roF6.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"7f8790b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 8175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"0e49842149fd426f3c8df8a852f6635f","sha1":"cbfd2e44e70c91e06905b2b1119bfd717eefff51","sha256":"018b84750a752132714f1df8bc21783da97eff315d76e032a641cea6028cedf7","sha512":"b9aef3cacc8ab9c5e76b9b13c71aa06767122b44d7d17c598149b9817a990bed0685938b97481368da29d37928002ab89d4dcfe56cc0ee6b343cd0758d49f82b","ssdeep":"96:IXBLIYIQW2XLGvtqlZYK9iIRauYyHmddIVcq6Ss515Dl3k7yvWLzr9FwB8nIBRQq:IXhp9L/wK5sLdQeSmvIzuhs14/P64","tlshash":"f0f1fe50e39808375ab1f6fa0464a2c477aad87b84472dbe3cb4c9dc3277e570125ab3","first_seen":"2023-03-07T17:29:23Z","last_seen":"2026-04-06T12:51:05.318695Z","times_seen":33,"resource_available":true,"data":null}},"time_used":1156,"timings":{"blocked":1001,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/login.2Mwsw.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.027Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/login.2Mwsw.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"34148fb8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 4426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4426,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4423), with no line terminators","md5":"3fba9fa232bedd401c562d9824073a9e","sha1":"4339e4ef11a356ec9a7b6f52a06dfce529486c55","sha256":"849e915326261fa38edd24638d8aa7ad9b914ac60ad7757d9c5d2f60c3c7a352","sha512":"09bcda09c35ad83edf715c5f46f02864f7b77b02675a86e23bc227f0e56ca18d680ddd74fbeacdfde218e803c0c5234b3d53d1c4146ab7ab0bab5b671d905c24","ssdeep":"96:Fc8nNfZim8CMEwdvLDzy7WARQ9aG1e6u2GvBM3qgRR0gWEK+c:Fc81MEKKfRulnAvBM3Zv49","tlshash":"e891435571a16ec79a6bb3b9202b21059026b831d54bc4ad743888da4cbee4f3123f3f","first_seen":"2026-03-01T12:20:00.211763Z","last_seen":"2026-04-06T12:51:05.288562Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1317,"timings":{"blocked":1161,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/object-sans/ObjectSans-Medium.3S5XI.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/object-sans/ObjectSans-Medium.3S5XI.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 37144\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 15 Jan 2024 22:01:50 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20601307\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37144,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37144, version 2.0","md5":"f9f5d37c50615582b537f669266751fd","sha1":"fa2a3d42f18700498889d601fdb40b1307e707c6","sha256":"d431e5e9503fcd17eaa38f4fdfe2f04bc7ce3510ebb006a409b768f72e7e06c2","sha512":"492b6175dab8bae46d831b4491d4c1ff6d5fd9ce6b18f1a331cb22a1e959a995b9563a33c572a85c42896ffd03263ee35c34be37cdb08f9c3ec80945b817f8a6","ssdeep":"768:ruYQcOaX3jAEeO9MW8Mrrvh2DscSx6DWKtO5hMr/2sIuvuLUB4KT:XQbaHcW8IhyJc6DZIJAB9","tlshash":"e4f20143c9667b74aa3606b6b8faadc4828824b5795fd1df394c1380ef1ac4a2b43525","first_seen":"2026-03-01T12:20:00.21323Z","last_seen":"2026-04-06T12:51:05.344533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":106,"dns":15,"connect":12,"send":0,"wait":2,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/fontawesome/fa-solid-900.2v4iV.woff2","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/fontawesome/fa-solid-900.2v4iV.woff2 HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 141672\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 19 Dec 2023 18:55:19 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20597733\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141672,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 141672, version 331.589","md5":"727b77536bbffb67b6610e2a1674403c","sha1":"62b16e3e116914fac964f3dc1f42ca2171d74d45","sha256":"1c4076badc540e6416c97b7202cfb69b7c9b4a5f9750cbf01a0bd3b0ad6fecc9","sha512":"4a5b904996094c4684f9aa7520926d25b9925ac724955f9729f547c65711e0dcf9b183b3be78f1dc40aa726b20489b76334f58f1188217a9a499a5969d3fe88e","ssdeep":"3072:SubVjEs1U3A7u/MWtPZwAMD/jh+sgfo2LfOGQza9lG:Suh1UQ6/M+B3S/jh+d5LfQQlG","tlshash":"50d3125b20f2a378fa097c5f1947fc57421669dfb20899d0a013e7ff8215d1498cfa61","first_seen":"2023-05-05T06:47:39Z","last_seen":"2026-08-04T14:52:48.87526Z","times_seen":513,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":106,"dns":14,"connect":12,"send":0,"wait":18,"receive":4,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/twitter.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/twitter.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: JZXUb5koyyHVxezFwfY4GtIf9VIkzwGx71yvd7iHar0xwfnnxk/K5Zj3cYWQiV9EXnL03sUFTwciUsb+nIzzIz9VSu9CcB9mpyA3W9uflyI=\r\nx-amz-request-id: Z95C4GA7SPPBE3K7\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 09 Jun 2025 18:38:50 GMT\r\netag: \"a79a863a865ea0208295e07e31d5b483\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 489\r\nserver: AmazonS3\r\ncache-control: public, max-age=38052\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a79a863a865ea0208295e07e31d5b483","sha1":"76c25af4164a7a9c717c5ea2adc226b22a737872","sha256":"d6469266c78f14a21b59112831306f9367697963de5f40841b3b2ae45bc142a4","sha512":"127b5a56433b3c12b88018d2683c626bc9805159cbb75203c6016e98fde399811f038aa83dd41385841efd62b0acf5450c229cfe2b96dbcbd6a6a06bc48ff160","ssdeep":"","tlshash":"7cf09e86666d397ce0274bace74023fc4d7b24c25ac86329d5a00d3e632854ced27af6","first_seen":"2025-06-28T07:54:18.683341Z","last_seen":"2026-03-08T03:07:39.957971Z","times_seen":22,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navbar.blizzard.com/base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main","fqdn":"navbar.blizzard.com","domain":"blizzard.com","tld":"com"},"ip":{"addr":"52.84.50.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blizzard.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Apr 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:A0:01:8A:3D:B1:61:3B:C9:80:66:71:EC:0B:87:78:4D:C2:C8:EE","sha256":"42:1D:55:5D:1C:DD:59:01:B4:23:6E:A1:41:13:69:53:BF:68:5B:FF:17:25:A0:34:72:67:A8:2E:25:42:ED:EF"}}},"request":{"raw":"GET /base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main HTTP/1.1\r\nHost: navbar.blizzard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nx-powered-by: BWA\r\ncache-control: max-age=60, stale-while-revalidate=604800\r\ncontent-encoding: gzip\r\netag: W/\"210e-edsVzA7Ndw3N9oKbcggQA/hInnE\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cxYkus2BY3Gqx3G-C2BvBcI6dzQY3xXGuQsBx--GeHZlnUUT950LTQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8462,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"482eeb0e4cea549a1fb250b235490bfb","sha1":"79db15cc0ecd770dcdf6829b72081003f8489e71","sha256":"ac6e5446bf80c3e37a61890824c2a43c8dcf2b8734a79334b5126927c0eb4a6d","sha512":"5e351d41ca415029634ec69b79d127a894905d6dce43498509a100dd375fa15fcfe6e28516ab7376e8d2c9d69e0c6e705ffa7dbe7cd5d028b452da641bf2fece","ssdeep":"96:ezBAp9BMV10zQteu3yXPhgin4Nv/W0AVQso8UQalUdk8DfdKHqBjxdsnEjf6mO02:7B7TDjVjf6+HDjG","tlshash":"5d02022fe69d4c3d2b0d87c6e2860e0a62dc55827dccfd51d9acde5821d7ac462138bb","first_seen":"2026-03-01T12:20:00.203028Z","last_seen":"2026-03-01T19:57:08.289772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navbar.blizzard.com/base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main","fqdn":"navbar.blizzard.com","domain":"blizzard.com","tld":"com"},"ip":{"addr":"52.84.50.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:34.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blizzard.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Apr 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:A0:01:8A:3D:B1:61:3B:C9:80:66:71:EC:0B:87:78:4D:C2:C8:EE","sha256":"42:1D:55:5D:1C:DD:59:01:B4:23:6E:A1:41:13:69:53:BF:68:5B:FF:17:25:A0:34:72:67:A8:2E:25:42:ED:EF"}}},"request":{"raw":"GET /base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main HTTP/1.1\r\nHost: navbar.blizzard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nx-powered-by: BWA\r\ncache-control: max-age=60, stale-while-revalidate=604800\r\ncontent-encoding: gzip\r\netag: W/\"210e-edsVzA7Ndw3N9oKbcggQA/hInnE\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: RJTUCmIknsbcFNalLzBgnpfvxexKb0OUru8VPRwQN7fu_xz6zbPoWQ==\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8462,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"482eeb0e4cea549a1fb250b235490bfb","sha1":"79db15cc0ecd770dcdf6829b72081003f8489e71","sha256":"ac6e5446bf80c3e37a61890824c2a43c8dcf2b8734a79334b5126927c0eb4a6d","sha512":"5e351d41ca415029634ec69b79d127a894905d6dce43498509a100dd375fa15fcfe6e28516ab7376e8d2c9d69e0c6e705ffa7dbe7cd5d028b452da641bf2fece","ssdeep":"96:ezBAp9BMV10zQteu3yXPhgin4Nv/W0AVQso8UQalUdk8DfdKHqBjxdsnEjf6mO02:7B7TDjVjf6+HDjG","tlshash":"5d02022fe69d4c3d2b0d87c6e2860e0a62dc55827dccfd51d9acde5821d7ac462138bb","first_seen":"2026-03-01T12:20:00.203028Z","last_seen":"2026-03-01T19:57:08.289772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/cookie-consent-filter.22rFm.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.948Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/cookie-consent-filter.22rFm.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ccdf8bb8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 6506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":6506,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6503), with no line terminators","md5":"228c4207bf6a0150c8c38fa1e01e8d6a","sha1":"7fb321f07fc1810619bc32a52b0865e4136ee48b","sha256":"b3ed966012572ba0e3996b92385065732872cb50bf9b937e6a016a739ba37369","sha512":"5555a5b200f1e5cc1d8d31b2c6661dbf6f4e950a16c24d4e1b032b3e5ace179a2ff55ca2a584838728edc1375f02dd3628ad957383e7e9f55d943503c758dc98","ssdeep":"96:niTYJvexaC2wvKrLHmI3ug0YwheDvVTr+UrFO+UXnO9A2/syl7lfrrGvrbrR/54F:niC2xZWT9odIdr+UZHUXncA2kyltGXq9","tlshash":"aed119fa71c0ba70837781ba232f92b9b13515c468d980b4a50a99b07805ddbf723fd7","first_seen":"2026-03-01T12:20:00.222108Z","last_seen":"2026-03-01T19:57:08.292168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":155,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/css/code-input.04amQ.css","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.724Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/code-input.04amQ.css HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 1163\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b95f02d7712377499e60763a74069631","sha1":"2a6ea7a8c7353bddd6bd7b487842da1feaa525cf","sha256":"5da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68","sha512":"03e939b8cb16223055781ed96668e3426b9eec6c747da9d4071cd0144c218a9e5f725a5bc2fe6e9ba8da1795386ff08434050aa69bb67bc85029ab09ab394ba2","ssdeep":"","tlshash":"f621201992b05d50e65684a070f2b3ea3a4b8646f48b0b99e422722fd8c256290df384","first_seen":"2025-04-07T01:16:36.738328Z","last_seen":"2026-08-04T05:03:45.309467Z","times_seen":5952,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/battlenet-logo-color-trademark.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/battlenet-logo-color-trademark.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 2I0vhOIU9N/LBjHzpsZJCYjU0CUqeUykcoLo7MT5bOtCETVVZe3nMkl2xfZBacltTC29V6E3U10=\r\nx-amz-request-id: WRKC85NX8KFZAKZW\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 09 Jun 2025 18:38:44 GMT\r\netag: \"b518ac446138258d41e75d37659dd1ac\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 4630\r\nserver: AmazonS3\r\ncache-control: public, max-age=47302\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b518ac446138258d41e75d37659dd1ac","sha1":"4a365c9930c32e9451783c4fe38d9374358c969d","sha256":"165e3db6874c1574cf54a3c20e99ef6ce8f0e2512d4b6ade5779c90b71f5fcfe","sha512":"f6748ae333eff898d6d415287d59893bd7c04f1fdd4c1b7781389a6f4c6f1c24e7dfe28437eaa01b64be52a17e585d92a90957eaf1951b71018038898aded6ed","ssdeep":"96:n48mhlb8+JtliZByA7NVqmnUzgJHVkB2Es1b9fs0cgU:n4XbhFEBDNdnU4kB3ob9k0w","tlshash":"58a10fed372c139cf5539aacdf24d5b4670f646abbb9a290895e073c3c4b994e407c28","first_seen":"2025-10-20T21:32:09.46041Z","last_seen":"2026-03-01T19:57:08.337245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blz-contentstack-assets.akamaized.net/v3/assets/blt72f16e066f85e164/blt4effa2419596f476/ObjectSans-Bold.woff","fqdn":"blz-contentstack-assets.akamaized.net","domain":"blz-contentstack-assets.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /v3/assets/blt72f16e066f85e164/blt4effa2419596f476/ObjectSans-Bold.woff HTTP/1.1\r\nHost: blz-contentstack-assets.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 45444\r\ncontent-type: application/font-woff\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-request-id, host, connection, x-forwarded-for, x-forwarded-proto, x-forwarded-port, x-amzn-trace-id, accept, origin, user-agent, x-bnet-sso, sec-fetch-site, sec-fetch-mode, sec-fetch-dest, referer, accept-language, x-akamai-config-log-detail, akamai-origin-hop, via, fastly-ssl, fastly-client-ip, x-forwarded-server, x-forwarded-host, x-varnish, fastly-orig-accept-encoding, accept-encoding, x-timer, prod-blz-origin-token, x-device, fastly-client, fastly-ff, cdn-loop, x-envoy-external-address, x-envoy-attempt-count, x-forwarded-client-cert, x-datadog-trace-id, x-datadog-parent-id, x-datadog-sampling-priority\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH\r\ncontent-disposition: inline; filename=ObjectSans-Bold.woff\r\nx-contentstack-organization: blt40123efcce0dbcb9\r\nx-runtime: 157ms\r\nx-request-id: 44c4677e72b27fede2244649767f30d2\r\nserver: contentstack\r\ncontent-security-policy: frame-ancestors none;\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nx-download-options: noopen\r\nx-dns-prefetch-control: off\r\nfeature-policy: camera 'none';microphone 'none';geolocation 'none';encrypted-media 'none';payment 'none';speaker 'none';usb 'none';\r\naccept-ranges: bytes\r\nx-served-by: cache-bfi-krnt7300113-BFI, cache-lhr7367-LHR\r\nx-cache-hits: 18, 2\r\nx-timer: S1688778237.694810,VS0,VE0\r\naccess-control-allow-headers: content-disposition, content-type, cache-control, content-length\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=900\r\ncache-control: max-age=7540020\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nakamai-request-bc: [a=23.36.76.92,b=584296974,c=g,n=NO__OSLO,o=20940]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45444,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 45444, version 0.0","md5":"faa901c95e801b3bfde692863236412d","sha1":"b438401e7f42c6296fc55cd91a331e0dcfe731fd","sha256":"08d2e84f04dc20d4db60e4ca2ce57c4cee9a648c283c54bfd7dffa4af077be7e","sha512":"5916d887a9478076010ceec1438b96a339325e8aec91a294e64a273e6326ab7affadd82156e8df0763f45999a13f9e54e52d3b20af07ba63c4490fc3a2285f25","ssdeep":"768:Xzp5t/Jk0BMWE3l8xBz0zXs3EPoRC6ng9yai0FgIplEQfPh4augiz7:Dp5X2l8xdMOEgFAi0KIpSQh4augG","tlshash":"4213f10a4eafafc5f2ae9f32c924df50155041f1ae4298e79ec4a240658bcbc5e5067b","first_seen":"2023-11-01T22:13:23Z","last_seen":"2026-04-06T12:51:05.302948Z","times_seen":19,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":50,"connect":1,"send":0,"wait":9,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/x.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/x.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: HTwN3/BV90koBEAIN/6zAtFWReh5EXvCLHjXSD+dsi5xl5LNd28YlO0eqqpzZYa89dgwMdVbqJ8=\r\nx-amz-request-id: 25PH7HSA8V382P54\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 25 Nov 2025 13:55:39 GMT\r\netag: \"a3dc3aa6d71296854172d75e8bfe9499\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 196\r\nserver: AmazonS3\r\ncache-control: public, max-age=72345\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3dc3aa6d71296854172d75e8bfe9499","sha1":"3c89f811501528bf4884879d84e7ac18a57369df","sha256":"6623c457d56da5484dd170bf7e323e7f0988a5ef5080f85922e60173af284a49","sha512":"c744364dfd612a1082de0d84e3b0d7963ff4cb0d99b62efb9cf5430490145e4f8ceba161d69ccfb6971182ff3435a6457701986b8674417bae60213d70550b78","ssdeep":"","tlshash":"27d0224a421c0c2cf4628a24d738333400ba22822209113c8c6100316100b8dbc379e4","first_seen":"2024-12-08T09:07:53.517541Z","last_seen":"2026-03-08T03:07:39.953667Z","times_seen":24,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/device-proof.28IRE.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.024Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/device-proof.28IRE.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c5d590b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 2913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2913,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2910), with no line terminators","md5":"b73c51f1ebe80a5106ee6d61b0507201","sha1":"8cb31306be602d71303a202f206af825be10b27f","sha256":"21c969eb0240b3c19cff18f5ed00f661aea9c9411d388413b79993c6d6fc6fa1","sha512":"9340085c67e1e72d66f7d37e7cd5d1f3638211b7df3669316139588e35505ecda6bdcd8787cf389efbfc797ee9baa88fcd0ee39e13a1380a42292f043a4a8449","ssdeep":"","tlshash":"5e51659e7e71b07a62a224b7645f550ae1b35e16a80a44e0f1426d403cfdf4d83b7ecd","first_seen":"2026-03-01T12:20:00.234889Z","last_seen":"2026-04-06T12:51:05.429421Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1272,"timings":{"blocked":1111,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/global.0thEu.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/global.0thEu.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"99ae90b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:21 GMT\r\nContent-Length: 3926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":3926,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3923), with no line terminators","md5":"509777d1b91cf95400e0049cb6b0a088","sha1":"3c74e247ab55511fa9ac689ec0bbb299355ac60c","sha256":"b1d0873e4e6af7208a0d03583fdd8e282af8ccede08ebf964940c1bd797e78b8","sha512":"5d995dbe822cd8401d6ce803c250582b925dc0392b1ea324059773ee4b98be9fb13aa39bad51333326ec9971967277bde4187d4ff7e51cd0a21e4dce48dc36cb","ssdeep":"","tlshash":"c981b53dbaf170a6053b4565631b260570333cb699069d4496388cf269bae0f129beff","first_seen":"2026-03-01T12:20:00.242417Z","last_seen":"2026-04-06T12:51:05.409495Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1314,"timings":{"blocked":1153,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baseui.akamaized.net/icons/facebook.svg","fqdn":"baseui.akamaized.net","domain":"baseui.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /icons/facebook.svg HTTP/1.1\r\nHost: baseui.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: LstZcn1m50DVQrbXsm+kKwJdm5VRFFZj9AKkHWnEVfXy21nqf8qFDSbwLj7G5NFCqhrr95y1drXK4oAuJSGqGfjs2FwpLHYygkcjgg6MG3M=\r\nx-amz-request-id: DFVEF4Q0QPDPMGXW\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 10 Jun 2025 15:53:42 GMT\r\netag: \"25ac978b76e4bde965f47b38400851af\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 572\r\nserver: AmazonS3\r\ncache-control: public, max-age=36800\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25ac978b76e4bde965f47b38400851af","sha1":"b75f420da36b82f1733d0072d3bb28ad4a981895","sha256":"9f349cc3ff14d47a07d3e87cb4a8bb3d9c32a2738cab411712358a3f8ac546b9","sha512":"d830887e66b101b70f98d0fb17c8cff26fae6df29e87456be85c050a7e08aad7cf5e70dafd56649e603a37aa68f635f2aa2eecf425f9dfed5e40f35c84087331","ssdeep":"","tlshash":"baf0ebcd93bd9c2ce49a0eb9f351327808b0689568c02ab38634a43fb92060cad0b4f0","first_seen":"2025-01-05T18:11:46.881079Z","last_seen":"2026-03-08T03:07:39.859418Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T12:19:30.522Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 02 Feb 2026 15:08:10 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0294bbe5594dc1:0\"\r\nVary: Accept-Encoding\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 4130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":16221,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1210), with CRLF, LF line terminators","md5":"3f8101c13907f1abe881634d83289b41","sha1":"b343f221d6a787c96cbbb0ec523a8549c0a07053","sha256":"1e42981c22f8f51bf76574d4c3bb388893bad5edb45d43b4b44445111984c317","sha512":"2a7e34aa31a31584b5000125b2e395f33fea6f821f9a5f01bc51ceeabd0575897137f35255c9e7ae79beed2f27a86589c2cf69d70196cdc9cef6c437e9f0722d","ssdeep":"192:6YsXWut9/BkXg7bqHKVfj2XaVe6+HIdhrVSwLtOFiGBgBFuml:tu/+Xg7bqHKRfVTTVCFiGWTuml","tlshash":"98729701bc04cc338853eff4ef94ea18a099d539c7459cc892e997ea2bf1d5807656a7","first_seen":"2026-03-01T12:20:00.24692Z","last_seen":"2026-03-01T19:57:08.309258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":147,"dns":1,"connect":160,"send":0,"wait":160,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/facebook-logo-white.42pqh.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.939Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/facebook-logo-white.42pqh.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"933ec6acb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 346\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c56d55294f038cf0877004324253ac2c","sha1":"eeeeca9df4da92b0ebbb4022876eee980c761e02","sha256":"03d268c29e71ede2fdb45501bc8888661afcf83d1cf126345f9a9dbc8d556bfe","sha512":"74b23d3e5f8581a7ce662be33a0664c5f718270ffd3bd5d0ea1971d1a56e84b7856d6c22e3c92ee14a4257c55986d2efb528b9a6b35ecfbfff0ecf904be838c6","ssdeep":"","tlshash":"54e0c074f016c604842d93d11c2473b2160f14eb25d2007980809d387402ae44e00dd9","first_seen":"2023-05-01T21:53:22Z","last_seen":"2026-03-01T19:57:08.302183Z","times_seen":34,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blz-contentstack-assets.akamaized.net/v3/assets/blt72f16e066f85e164/blt1e7ef8500ede2f96/NotoSans-Regular.ttf","fqdn":"blz-contentstack-assets.akamaized.net","domain":"blz-contentstack-assets.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.96","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /v3/assets/blt72f16e066f85e164/blt1e7ef8500ede2f96/NotoSans-Regular.ttf HTTP/1.1\r\nHost: blz-contentstack-assets.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 213902\r\ncontent-type: font/ttf\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-request-id, host, connection, x-forwarded-for, x-forwarded-proto, x-forwarded-port, x-amzn-trace-id, sec-ch-ua, origin, sec-ch-ua-mobile, user-agent, sec-ch-ua-platform, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-dest, referer, accept-language, fastly-ssl, fastly-client-ip, x-forwarded-server, x-forwarded-host, x-varnish, fastly-orig-accept-encoding, accept-encoding, x-timer, prod-blz-origin-token, x-device, fastly-client, fastly-ff, cdn-loop, x-envoy-external-address, x-envoy-attempt-count, x-forwarded-client-cert, traceparent, tracestate, x-datadog-trace-id, x-datadog-parent-id, x-datadog-sampling-priority\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH\r\ncontent-disposition: inline; filename=NotoSans-Regular.ttf\r\nx-contentstack-organization: blt40123efcce0dbcb9\r\nx-runtime: 121ms\r\nx-request-id: 72ffc8f8339edc657e637694e9fc2255\r\nserver: contentstack\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-served-by: cache-bfi-kbfi7400051-BFI, cache-ams21078-AMS\r\nx-cache-hits: 29, 0\r\nx-timer: S1713878137.684475,VS0,VE145\r\naccess-control-allow-headers: content-disposition, content-type, cache-control, content-length\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=900\r\ncache-control: max-age=723464\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nvary: Accept-Encoding\r\nakamai-request-bc: [a=23.36.76.92,b=584296962,c=g,n=NO__OSLO,o=20940]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398968,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2012 Google Inc. All Rights Reserved.Noto SansRegularMonotype Imaging - Noto SansVersi","md5":"5a87cce84010f7cea085ae218d44a64b","sha1":"2b2500b3269369d0d1a29768aaa869405d4f1575","sha256":"2ddeaed07f6483f7831b23faa32cf85a04c3406eb4bb2925530894805a05d4fb","sha512":"f541e86a3ac19bd8b0f1304642e16722091d2acb6007c23605b298e8c996831b64eeeab6cc98a4f9232cb2ac4641a5ce429a7600f27ff83cc12f5e93e4e4a461","ssdeep":"6144:PYUwT3QibUBjF+bvxAlk85ZPJ458PnW7yIkeb80NJxQNnikXWd8QAqIzftiwaDuZ:wUKlGjF+zKi85w58BIkoyDFeB2rrhu0R","tlshash":"d1846c06db23fb39a51a75bac013cb4309927510736ad24b2cad42b5acde1bccf917d6","first_seen":"2023-04-07T11:07:17Z","last_seen":"2026-08-03T21:12:55.950803Z","times_seen":549,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":7,"receive":9,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/css/code-input.04amQ.css","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.954Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/code-input.04amQ.css HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 1163\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b95f02d7712377499e60763a74069631","sha1":"2a6ea7a8c7353bddd6bd7b487842da1feaa525cf","sha256":"5da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68","sha512":"03e939b8cb16223055781ed96668e3426b9eec6c747da9d4071cd0144c218a9e5f725a5bc2fe6e9ba8da1795386ff08434050aa69bb67bc85029ab09ab394ba2","ssdeep":"","tlshash":"f621201992b05d50e65684a070f2b3ea3a4b8646f48b0b99e422722fd8c256290df384","first_seen":"2025-04-07T01:16:36.738328Z","last_seen":"2026-08-04T05:03:45.309467Z","times_seen":5952,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":142,"dns":1,"connect":153,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/playstation-logo-white.2XvYV.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.944Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/playstation-logo-white.2XvYV.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"b3b7c4acb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":640,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bec9a0aa465fe5467f1382d8dd0327b","sha1":"007f226f3d5f0ca7ca8ae2aa072972e4c9ee880b","sha256":"3368a7a4aa522cf453c2f7dcd7c8b737bb5014f59217232eaa1a91f55ed07d9f","sha512":"39fc02117cae92da639522fff8e48d4758b13e4f356e5d144a9dad4c6dde579ec303c46e27aaa0fa7014fff5708e6cc992759dcc04a97fdd03ac5a35d09bfc6a","ssdeep":"","tlshash":"e0f0a26e43d9cafc9d708bf9cb306478e01ea02db1d0a3f4c594867076a0cd6d24d2d6","first_seen":"2023-07-24T11:22:02Z","last_seen":"2026-03-01T19:57:08.358404Z","times_seen":19,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/image/steam-logo-black.0rNz9.svg","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:32.946Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/steam-logo-black.0rNz9.svg HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/static/css/global.1h5aP.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 31 Jan 2026 13:15:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"cef3c3acb392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 2811\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd6b58f4a0010570974d2897e65f6fab","sha1":"127766587f6053f19c0ff1c0a26d40c924e8cf11","sha256":"5b8fbb8e4458f493c7853415f5443cdba1f22008a8c471082bc8e49b26f32bf3","sha512":"851b7384275dab672ddd1d1fc84a92b98b40bc7844176086dcd0a5f44ef8bc86246e430cbc5e292012d836e9c97a15d2fbd2924ed54f4f1d03855486eccdbc2f","ssdeep":"","tlshash":"7b5175c36270e3c45bced84daf65ecd4414a70ff8d7aa4c19b9b4f0868db9c67909854","first_seen":"2023-10-08T13:16:22Z","last_seen":"2026-03-01T19:57:08.314524Z","times_seen":19,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/noto-sans/NotoSans-Regular.0RsFi.woff","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/noto-sans/NotoSans-Regular.0RsFi.woff HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 171312\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 28 Jul 2023 18:15:51 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20227840\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171312,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 171312, version 2.0","md5":"2dd2700f753d7971937c94273c3afba6","sha1":"4fd55458b2204085a9f277759db5b56babea7b71","sha256":"18926f220215a7afdad021a0b033bfd480e4168f491bbae47673c9c17eae37c9","sha512":"74e4d68725b20cb67f1f4c2d5419caf647b1c664e1161252cf07090db8b01e8a9d734c87420376c4ee4b0a45ededaabf530ba25d1d71cb9fff11c419b589e45d","ssdeep":"3072:gPkXSwSW5rjGb4Jd7RO3GIbK0/n7jEkFdT1NiOnsoOCWjMzlnWlZg3wr0SbFz0Xk:zXSwZtVJZejbJfrB1NNHOCWjMzlnWyYr","tlshash":"9ef3129ef53901cb683147e0dbe115a2a9e6643e7d7fc1c5ab70183840cee6650f89ee","first_seen":"2024-10-16T15:21:01.865871Z","last_seen":"2026-07-04T14:55:59.727804Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/picture/android-chrome-192x192.png","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.569Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/android-chrome-192x192.png HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Sat, 31 Jan 2026 13:15:27 GMT\r\nAccept-Ranges: bytes\r\nETag: \"fba9daaab392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":4400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"339dc2592ee00601b0b30df4f9449619","sha1":"0c3b7467f0d64e3bfd7c2d765e0da72a831d2624","sha256":"79654d98bf12048206b4e9f2564d8637414f4f1d94748126369cc1027dbe655a","sha512":"56a73fb10bbe05ee48b7977d7a867443b84039148ceff2b2cb323b3692206ccc6ba46969f65813fc69830828be9935e740437a71c3ea71da1108994aa0a8a362","ssdeep":"96:EQO5nvGqhq6IhcFosJ7CXO5b7lcA5T0RTDI5KwQnMdJ0:tO5vGmrIhbsJPlcBgR0","tlshash":"5b913cf2c4d85eb74ab79093157213a1ad7c2ab992b74d912bc4546613eaefc18118c4","first_seen":"2026-03-01T12:20:00.25934Z","last_seen":"2026-04-06T12:51:05.443197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navbar.blizzard.com/base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main","fqdn":"navbar.blizzard.com","domain":"blizzard.com","tld":"com"},"ip":{"addr":"52.84.50.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:34.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blizzard.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Apr 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:A0:01:8A:3D:B1:61:3B:C9:80:66:71:EC:0B:87:78:4D:C2:C8:EE","sha256":"42:1D:55:5D:1C:DD:59:01:B4:23:6E:A1:41:13:69:53:BF:68:5B:FF:17:25:A0:34:72:67:A8:2E:25:42:ED:EF"}}},"request":{"raw":"GET /base-api/v1/en-us/navfooter?content=battlenet\u0026cookiesUrl=%2Flogin%2Fcookies\u0026entry=main HTTP/1.1\r\nHost: navbar.blizzard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://microsoftbattle.net/\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\naccess-control-allow-origin: *\r\nx-powered-by: BWA\r\ncache-control: max-age=60, stale-while-revalidate=604800\r\ncontent-encoding: gzip\r\netag: W/\"210e-edsVzA7Ndw3N9oKbcggQA/hInnE\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0YzKK3DTkrtZxLO2JXmBf7mZBJpQc-TeZ6VUyy3MJgaJYj7IHDJO9g==\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8462,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"482eeb0e4cea549a1fb250b235490bfb","sha1":"79db15cc0ecd770dcdf6829b72081003f8489e71","sha256":"ac6e5446bf80c3e37a61890824c2a43c8dcf2b8734a79334b5126927c0eb4a6d","sha512":"5e351d41ca415029634ec69b79d127a894905d6dce43498509a100dd375fa15fcfe6e28516ab7376e8d2c9d69e0c6e705ffa7dbe7cd5d028b452da641bf2fece","ssdeep":"96:ezBAp9BMV10zQteu3yXPhgin4Nv/W0AVQso8UQalUdk8DfdKHqBjxdsnEjf6mO02:7B7TDjVjf6+HDjG","tlshash":"5d02022fe69d4c3d2b0d87c6e2860e0a62dc55827dccfd51d9acde5821d7ac462138bb","first_seen":"2026-03-01T12:20:00.203028Z","last_seen":"2026-03-01T19:57:08.289772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/css/global.1h5aP.css","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.952Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/global.1h5aP.css HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c5e84b8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 61027\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":61027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61024), with no line terminators","md5":"43af4c17a1821a97487afffce6d89b32","sha1":"85e0d44d8aa2599d3ac5ed792c1e68dc16b43f4e","sha256":"1fa708de1a2c7208b4de080837e057e123613de4f791058fe08b9a3868eb28b2","sha512":"f2a5284deebfd881169f8ac354677d0dcd268fc031c21ad6dea39ad123ea35af15bbef2d9c2547cc165f06800f80cfeb94d6bf1004864d6ba2445119f9907952","ssdeep":"768:OcLjnqsfV31V7lbp7HMBWEkJmmIiopSGQthiV1XV:xvnqsfN1V7XHMBWEkJmmjopZQthiV1XV","tlshash":"dc53a4115ab66babf753033eb8da10d478340432a7878aff89e25a78c7c45ca17365cd","first_seen":"2026-03-01T12:20:00.262108Z","last_seen":"2026-03-01T19:57:08.312943Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":138,"dns":1,"connect":154,"send":0,"wait":155,"receive":622,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/js/analytics.2Cckf.js","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:30.960Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/analytics.2Cckf.js HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sat, 31 Jan 2026 13:15:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"5e668db8b392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:20 GMT\r\nContent-Length: 483\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":483,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (480), with no line terminators","md5":"ffbbe9671d2af784792f41af6631fbfd","sha1":"37733f81204637282ed875a42a88233f183fc18a","sha256":"97a8fd7fa921b111a3b4d3ee4c4013ceb9280cffd638e3edd4ce1652b524b587","sha512":"08d93b954bcbf31de23b54e122d0e3176f4e9d9cb3d8f1351662656fac4df6b161604baf361240a1e999e97c7f9eb162bb68d93e9814e0d5f3279db6c8340829","ssdeep":"","tlshash":"d6f0dca636055e3061d21bd92efe8a0935023334608d4c31ae6ed85a1b7fed26853e5c","first_seen":"2026-03-01T12:20:00.266407Z","last_seen":"2026-03-01T19:57:08.352026Z","times_seen":2,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"microsoftbattle.net/static/picture/spinner-battlenet.1IdwV.png","fqdn":"microsoftbattle.net","domain":"microsoftbattle.net","tld":"net"},"ip":{"addr":"156.232.11.252","port":80,"asn":138152,"as":"YISU CLOUD LTD","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:31.014Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/spinner-battlenet.1IdwV.png HTTP/1.1\r\nHost: microsoftbattle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Sat, 31 Jan 2026 13:15:27 GMT\r\nAccept-Ranges: bytes\r\nETag: \"cc30f2aab392dc1:0\"\r\nServer: Microsoft-IIS/7.5\r\nDate: Sun, 01 Mar 2026 12:19:22 GMT\r\nContent-Length: 2249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:7.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 20, 8-bit colormap, non-interlaced","md5":"7cd7fb343b3add62ea0aeb262b5ee2ef","sha1":"d9bc4c372063ea93aa30b902000d4f39db415177","sha256":"1bde93040705edf799205c54ea90eb0f3ec4cc4863c8500f2c2c013a91e1ac3d","sha512":"3f567ff73fc1457ac98cd39b93f902c36da7dd5e9afa6833ac5d301eabbba7af7ca81044537df6b9002b70142177770ba54b603cce7256ffdcec5271e4065896","ssdeep":"","tlshash":"d0415cdcb006fab15de1c339e9d3209d00c59a62eeff211bc1529b8bd5a189a200989b","first_seen":"2023-05-01T21:53:22Z","last_seen":"2026-04-06T12:51:05.408471Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1939,"timings":{"blocked":1782,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"microsoftbattle.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"microsoftbattle.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnetaccount.akamaized.net/login/static/css/toolkit/fonts/noto-sans/NotoSans-Bold.1nSFW.woff","fqdn":"bnetaccount.akamaized.net","domain":"bnetaccount.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://microsoftbattle.net/","date":"2026-03-01T12:19:33.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /login/static/css/toolkit/fonts/noto-sans/NotoSans-Bold.1nSFW.woff HTTP/1.1\r\nHost: bnetaccount.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://microsoftbattle.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://microsoftbattle.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 169040\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 30 May 2024 10:18:54 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncache-control: max-age=20335224\r\ndate: Sun, 01 Mar 2026 12:19:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169040,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 169040, version 2.0","md5":"aae78d33e2fa1d5e69f8ecc452949cc5","sha1":"f7c7a72ec364a1425abc25ba9394cb655a9f2918","sha256":"fd4bc9dfd5c8418a1dd422aba148cf379d9c45ffd208ec3622362d8b6ecdc1cf","sha512":"a431ed3cbd9f28a43efcac269dc3938f3a7548f82f4c3af66e6af662b4cd9e1b37a2720004835c91af2ac5c1572bc1c67211f6f554fd7d2b25b04d6232c6bd27","ssdeep":"3072:P0xL6f97p6vUocaniH8YSr9NtnYnBRvjn6bF1LztUjJi9PVWIvaxs0e/S:P0xL6H6c3Cp9NmnB5n6vuWo2o+S","tlshash":"08f312b6c9f32dcaea13b425c1ee7c95bb1c562f6a6a75ab0e12d0f90c44c3e1152d0c","first_seen":"2024-10-16T15:21:01.890707Z","last_seen":"2026-07-04T14:55:59.676254Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
