{"report_id":"3061f25f-b119-43b8-8896-783a48da679e","version":6,"status":"done","tags":[],"date":"2026-05-06T23:41:42Z","url":{"schema":"https","addr":"microsofteam.top","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"microsofteam.top/","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"title":"Verify you are human","dom":{"size":506250,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65239)","md5":"ebbb446b06c6627c5859fea7d94bb6b6","sha1":"1854a4194a1e5dec4e015b81801186f12f4adfd4","sha256":"9e9d995a5519e20e96ac8bf6fd33da09ba5c038fe150e7e0402c6d7396f79f2f","sha512":"1a5e5051f6ccc455a46043f41e398c634bc39670c9960706d8afc59a1766627248b84a5931e83dc88ac725dc712b8797787183cc32ff9471332c4fa6815fd302","ssdeep":"6144:eNdDj05sY1N6YsmTYP9HqRG/ce8qkvX+N0KI7N2gfIpyjMvyAWqwfyjMvyAWqi:0E1R49KI/cSN0/W0olwqoli","tlshash":"a6b48851dd0a371eb3714c1fe78e29ee3b9a42ac942991cfbf5d31d8930d4658a70ca8","dom_hash":"domhash01eeb956cf9c03371a31324244820658","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"microsofteam.top","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T23:41:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"microsofteam.top","ip":{"addr":"104.21.5.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-05-06T23:41:43.060421Z","last_seen":"2026-05-06T23:41:43.060421Z","alert_count":0,"request_count":2,"received_data":582826,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"microsofteam.top/","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1958ed9e5362447c81448e2630e3cefe","sha1":"1e359108d95f65f80aebfbbe042c24cd0c67971c","sha256":"9de38da7cb6848a17844281e1c6c15c391d8bab5aea341378984079650c3b02d","sha512":"2f4168b6486c9772dbde0e3588cff2081f8d7cf4c3e247dde3de8cc5c1c9139104c517ae13da8cc212280301a9ccd013266a35a0f31dba857c4de9d8187d7f9b","ssdeep":"384:h0dqyUcONBnzESb+EphtbH9LRoq3mQl9FyD74ipTrFtOvvEv4FA:h04RbzESb+E5/mQl924+","tlshash":"b8c2931bede71d3009a3a17a179fa2c1b2319017e589c95478adb7100fce96593bbbcc","size":27657,"data":"","first_seen":"2026-05-06T23:41:46.07748Z","last_seen":"2026-05-06T23:41:46.07748Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsofteam.top/","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb5210ae99e99889a6da20ce9c233a1c","sha1":"c752e6501d6fecd971e996ca630b1e76dc228756","sha256":"84ad1790275f09566921a23b728aa78bbea536fc1fb48130e5f66657517d78e9","sha512":"7629b6070140fa0fd0a40cebf3fd4098eba64690886742c585918fedf6df5d7b590faeb17250b6cf2cc74df73cf06f621e57596c44e9426ec37552d4a75484e5","ssdeep":"6144:CNdDj05sY1N6YsmTYP9HqRG/ce8qkvX+N0KI7N2gfIb:AE1R49KI/cSN0/Wb","tlshash":"4f54e284ee077b1df360444bbadc2dcd77be97205876a2dbef2d2509210d8ba59b085c","size":290158,"data":"","first_seen":"2026-05-06T23:41:46.080279Z","last_seen":"2026-05-06T23:41:46.080279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"65be43434cc2bcc4e900853a03883dae","sha1":"72cfdc196fb5b7e6cfbb619061b00e62ae2de8ed","sha256":"3424b1598199973043335fbb9886544feaf33bd7d2e5e4e530dd2ba431cc3b3a","sha512":"2a5470e8b5d8d371f44d7619426825d923c17d5e6e2169debdf1e27598ab3075d6fcc3e68cbda531bb6860ab0c3dcb1de6acd3e10c46c17fb946be65af56304c","ssdeep":"3072:pREhJAm10x6vyAnqD4Z7iohJAm10x6vyAnqD4Zn+zESb+EE:syjMvyAWq7DyjMvyAWqj","tlshash":"4e249f260d5d379e76335c6ecb07257f3e8650eea10884df7c9eb2e8cb560508a29de4","size":216034,"data":"","first_seen":"2026-05-06T23:41:46.08291Z","last_seen":"2026-05-06T23:41:46.08291Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"microsofteam.top/","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T23:41:20.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsofteam.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 15:05:27 GMT","end":"Tue, 04 Aug 2026 15:05:26 GMT"},"fingerprint":{"sha1":"A0:21:CD:AE:A1:C7:B0:EE:C9:BB:30:C9:A5:6D:EF:1A:1F:8B:85:A8","sha256":"D7:78:41:31:90:DA:58:0B:09:B3:E1:F1:38:C7:B4:8B:F3:81:FD:5C:5C:B4:12:82:20:6B:E5:BE:EA:F4:E3:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsofteam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 23:41:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, novideoindex\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), camera=(), microphone=(), usb=(), payment=()\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uV3peIOvsmMSwJ%2BV7%2BnPQn3HhUfhQLJ%2BzIopEo4%2FmTYCBFSTzbt48ikCRzoDP9bcaGj7CibxPRv9%2BuH1Cv3fhEeZn0ptruloNXI9v5MNExxc5r%2BxPLR1jEmNIDDDlLgbjrf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f7bd5cb08fa56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290463,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65222)","md5":"9f2c3180e113977eddaf50842a25bff8","sha1":"c968f241e145f8e2351586a9a334045041ca4bcb","sha256":"c9098b44bbd986bc8252a3732cd6043bbc6284bdabe20fa3b5ca7636e646dec7","sha512":"5d724e17be7c1fd67a9b9c7df1582c57e3d9e400318d26b29abc21e3c8b2b273092c50e4c204f900be549babcd163fe7b366900e63d46d7b56461dbd3ef87d7f","ssdeep":"6144:4NdDj05sY1N6YsmTYP9HqRG/ce8qkvX+N0KI7N2gfIB:KE1R49KI/cSN0/WB","tlshash":"9c54e280ee077b1df360444bbadc2dcd77be97205876a2dbef2d6509210d8ba59b085c","first_seen":"2026-05-06T23:41:46.07026Z","last_seen":"2026-05-06T23:41:46.07026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":71,"dns":50,"connect":4,"send":0,"wait":178,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsofteam.top/favicon.ico","fqdn":"microsofteam.top","domain":"microsofteam.top","tld":"top"},"ip":{"addr":"104.21.5.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsofteam.top/","date":"2026-05-06T23:41:20.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsofteam.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 15:05:27 GMT","end":"Tue, 04 Aug 2026 15:05:26 GMT"},"fingerprint":{"sha1":"A0:21:CD:AE:A1:C7:B0:EE:C9:BB:30:C9:A5:6D:EF:1A:1F:8B:85:A8","sha256":"D7:78:41:31:90:DA:58:0B:09:B3:E1:F1:38:C7:B4:8B:F3:81:FD:5C:5C:B4:12:82:20:6B:E5:BE:EA:F4:E3:77"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: microsofteam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 23:41:21 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, novideoindex\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), camera=(), microphone=(), usb=(), payment=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yqf0u%2FKzAaiGizw7qwbKyhrsqVqxfavTz0SqxdjIYUTKsyD09FqHeZLbWG8lmWSJKB7Dc%2BFFpE%2BBE1PLE4l5qXjVPv6Rds3uyQkHmWsNhlKj1bhkXO1nQpHVdwx9%2FtXGIANL\"}]}\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 06 May 2026 23:41:21 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd5cdaa08b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290463,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65222)","md5":"69ffb3ea6b86682b4ed2c08eb0ff2ea3","sha1":"617b843b1d277d5ea81810cfee1da9a0e06bff2c","sha256":"280712bd0e0e46dd3e8472dc58415fcce9b2a3e002b9d3cebef3acd6987d778b","sha512":"c218fd094883338571f6b04240b2b5ad504f286d92969dda05ff6840299ccbaeb939c40fefbdfb2f407fa6c7aaee696b5b43e0d5dae2d2d1517ffd5ab6f7aa7f","ssdeep":"6144:4NdDj05sY1N6YsmTYP9HqRG/ce8qkvX+N0KI7NHgfIB:KE1R49KI/cSN0/VB","tlshash":"ae54e280ee077b1df360444bbadc2dcd77be97205876a2dbef2d6509210d8ba59b085c","first_seen":"2026-05-06T23:41:46.073909Z","last_seen":"2026-05-06T23:41:46.073909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}