{"report_id":"323f5e3c-4a9e-467e-892f-e6713b13ee54","version":6,"status":"done","tags":[],"date":"2024-07-14T10:20:39Z","url":{"schema":"https","addr":"microsoftsafe.top/Main/index2.html","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"ip":{"addr":"198.12.92.242","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"microsoftsafe.top/Main/index2.html","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"title":"Sign in to your account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T09:46:46Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-13 18:12:55","alert_count":0,"request_count":6,"received_data":5326,"sent_data":1962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"microsoftsafe.top","ip":{"addr":"198.12.92.242","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":3,"received_data":8846,"sent_data":1415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1421,"first_seen":"2018-11-19 11:50:03","last_seen":"2024-07-13 18:13:51","alert_count":0,"request_count":8,"received_data":260509,"sent_data":4007,"comment":"","tags":null,"fingerprints":null},{"fqdn":"logincdn.msftauth.net","ip":{"addr":"152.199.21.175","port":443,"asn":15133,"as":"EDGECAST","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-25","domain_rank":0,"first_seen":"2020-04-24 00:11:33","last_seen":"2024-07-13 18:22:38","alert_count":0,"request_count":2,"received_data":3667,"sent_data":1005,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-07-13","alert":"Outlook","trigger":"microsoftsafe.top/Main/index2.html","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_44ba818dfa55d8749503.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c28016b03854533016d0f85d4c8b9fa","sha1":"6ef172d9e1efbfaf8d0bbe7d2240bc25f0c94c8e","sha256":"79af9d6414cc1d900d943eb4e3bfca28338a72e0931ebfd6f93dcc0d7a6abcd2","sha512":"793422a7235c8cb34c8ed81dc9dd934c1f0919238e2c16a41f92e0a5aa051420bce24344a9286da55008d2188b54a09384647d1b1b95f7d427bbcd02b03a97ad","ssdeep":"1536:46Nq4+t8gIRPY0+r5qnWisYoBDkuo7hNCm5g5+eGdXtg2N5P2m:4OgDTMnWWKFq5g5eZu2bem","tlshash":"20b3195522df98bb13e260cd0c6f8f09a4ff0556044cc819eeedd6de5828a46f25fb29","size":113440,"data":"","first_seen":"2023-03-12T22:51:45Z","last_seen":"2024-08-19T17:02:18.492299Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"a34459a777b4853cc0b6b99c1b519ed8","sha1":"a114e3509ea887cb8b532a7da24f3dc5de66d219","sha256":"096e484edb287943f6455826128e4cc9721e410f75f521ad6fc886dba56d1963","sha512":"5a31eca8dcded5ede02b57de62551cfd5fe379e2b88be08bec1079413921ca0ed7ce0486af6ef6a02a88624c9a6a153737a1e27c86bf94af946e07a6aa22d624","ssdeep":"","tlshash":"9c70000a0a0a00c200ccc300c0a00c00a08a80028002800aac08200a02a0083a0a20b2","size":23,"data":"","first_seen":"2023-04-10T20:39:00Z","last_seen":"2026-02-19T12:38:40.753597Z","times_seen":1237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_NnFX4S8X6vb-OgGnD82WNA2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"367157e12f17eaf6fe3a01a70fcd9634","sha1":"77f4e1c8c9b300e7952815a0e053970165011712","sha256":"c974a0be091a8f09353472bbb41cb939e48a6796f6d0cf95686a7b4d73aa8490","sha512":"1fb814735b1465181bb89105321bb78f9358f1bf022909bc9fb3187deb36f2ddcd2024cac23c79c9bb3fc7a9b520df4c9f2db4d6626ad1b563523b9669ff4e77","ssdeep":"6144:qkmkaRgleTjKNbIEZD6vXa4JP49OxM+p5uE0HUNCLbG:qkAToIEZD29W+p5EC","tlshash":"06843bec789070b303dba079913f550672b6a444984eca60b52dd9d21fbac1ef227f6d","size":402757,"data":"","first_seen":"2023-03-12T22:51:44Z","last_seen":"2026-02-11T16:56:17.398642Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_drcggiwi0cystfohuwx04a2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37595932ae3df4d5dff9766cc31003c6","sha1":"4e691f33ebc6ef5a24bbc83b527d616e622f741d","sha256":"44baad03f4a45f96a002deb4f911b31d8b754956d4cae17a6ebfc2701efe03e7","sha512":"d4c067d70a2749d153a9db2e31a00176145ffc75616e1a407834f9d85628880af3d92a6f9d0dfb34bc223a47e8cc931a8950d43ab6843c9fec56f662d0daacff","ssdeep":"768:pMX5Ofo7y+F1tlfretkaKNa4DRN2ym+d/Px2gT18vK5PMjObnJncFHThRUbx3SgR:qdF1tlfretkaKNa4DRN2ym+d/Px2gT1F","tlshash":"4c23082bf3c8870707d3059d386e483276d2d1990589883c6ee6460fa7faf17eb275a5","size":47716,"data":"","first_seen":"2023-06-22T02:21:45Z","last_seen":"2026-02-11T16:56:17.400447Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_f3782014f3739160dbfd.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19fc5310fdb9795f5569eb904a86447a","sha1":"df36f79089d87f9a1f757e76e14e0fb10f85783d","sha256":"0e2ef54a0f3644ed15e5b535dd3a30b94ba2cbf05631efc41039ae793c8b0efe","sha512":"0c499d5244ad2f8a315255d28e2d43172fb26e5eb73954a65c35e403ca8c32decacfa7415c97b6255d820122ca676c08d2bb2c08a4040f04b5f9ebf29956ca73","ssdeep":"1536:oiTcX6ffjFha4QcuyhKYCcwztq0HNEKcZMiRGsh2:oi4X6QczHCcwztq0iPMiw","tlshash":"1eb3e8da76a5703143e2a2b040af114bf23a493ed80c94bcf529d4d6adb499a117ff7c","size":109863,"data":"","first_seen":"2023-03-12T22:51:44Z","last_seen":"2026-02-11T16:56:17.4013Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_85acbcb9234972130506.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"281aa44b6f0bacacfcd3581a74f48ddc","sha1":"1c9dee6e64d6d042d7632cab448b26b921910836","sha256":"28fa8f3ba41d8801e3d95e7128f5b2189a4344ebee1a56d4be7a313959f608e1","sha512":"3478836d525feca9f86a0547c410ecc8b19503b2807f17e0c7008f7f9f6d31fea9153778df373beed8d7f58e16144a60ac40657f5b8805a7466c24c6246f1075","ssdeep":"384:D1IlYO22Ze42yYfeXOh+rF3fW4DZD1zfDv79Xw:elbfJb7Bw","tlshash":"7b62e87abc6015700092e8a7e337d111c3ba6a15385eca31f45dd7ca1f62a06b63ff99","size":15748,"data":"","first_seen":"2023-03-09T13:13:34Z","last_seen":"2024-08-19T17:02:18.490889Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftsafe.top/Main/index2.html","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"ip":{"addr":"198.12.92.242","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f7c85dd5a4d986600419cfd9ac69ece","sha1":"12fa63d57e386e7f20614084be756e9cf3737457","sha256":"7190e150759afa82176642e227f866a005621d1d929337f1fab532e84d5b5786","sha512":"4bad42709b65f8f3702710d44d1c74d976eb9494b6b176dc1f89f16e12b62ef70c2dda5f9113180a2e65bc95bc197d1f8ddbe16a1fd69c50715485d7dc883c6f","ssdeep":"","tlshash":"58d0126e2a671d308a67f5be236ba351263350033445d566ba1c41890fa5f4b60b7bce","size":250,"data":"","first_seen":"2023-03-14T11:13:22Z","last_seen":"2024-08-19T16:58:56.133223Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:12.919878113Z","timestamp":1720952412919,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7CD67C1E38BF7CF396230F1F4CA4D83BD04FEDD7D1258139ECFCEDA994200568\"\r\nLast-Modified: Sat, 13 Jul 2024 01:53:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13048\r\nExpires: Sun, 14 Jul 2024 13:57:40 GMT\r\nDate: Sun, 14 Jul 2024 10:20:12 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"59f504b373ca5c60694d89699bf99f9d","sha1":"98d3531909c87a27c1cedcda49b9450cb398bdc7","sha256":"7cd67c1e38bf7cf396230f1f4ca4d83bd04fedd7d1258139ecfceda994200568","sha512":"8c6c664a5999e99e09af7da8e7358e2087cca4e589c4a70f707e07de0a2cf3dd863d45e9305da870fb319d08897c574e85c38dfae6fbe8383c06e4e515672f21","ssdeep":"","tlshash":"70f00e2302a9bd8863340161baa1c0992d285eab14954ab036cc03e3fcb9b7664cc009","first_seen":"2024-07-13T06:31:47Z","last_seen":"2024-08-19T17:05:30.179842Z","times_seen":41364,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:12.953319419Z","timestamp":1720952412953,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5708233A378CC8A68C0E53BDCFE39E54520B03B789D802E418325CAF6841AFE5\"\r\nLast-Modified: Fri, 12 Jul 2024 03:28:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3416\r\nExpires: Sun, 14 Jul 2024 11:17:08 GMT\r\nDate: Sun, 14 Jul 2024 10:20:12 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ee4ec9962b1a3bef02ecefc019ed216c","sha1":"5eda734d233f0a5b59856fb9bb3a99ca5269fc94","sha256":"5708233a378cc8a68c0e53bdcfe39e54520b03b789d802e418325caf6841afe5","sha512":"8ac8a4a4db187d1ce739cc15afee6166e060db5933b1c314a3e63bafc59bf9cad606a6fcbd57fa15c851bd735281fd97ca0cd2296ee56f83e5ccdb740d43bd46","ssdeep":"","tlshash":"9af0c02311f86da9b86182283efcd75b15116ffc14a106e218b086e3a8407e6c2c8149","first_seen":"2024-07-12T10:31:49Z","last_seen":"2024-08-19T17:11:45.086417Z","times_seen":24682,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:13.234439813Z","timestamp":1720952413234,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4CD1772D378248E886EE96F55D956FF0856BA3F2EAE9F15A10136E68F450CA70\"\r\nLast-Modified: Fri, 12 Jul 2024 11:47:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3114\r\nExpires: Sun, 14 Jul 2024 11:12:07 GMT\r\nDate: Sun, 14 Jul 2024 10:20:13 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"4a4d81b1c193182fe2b1122877e94203","sha1":"fd1f4427cb5867a8f63ae15825279827bbf768e6","sha256":"4cd1772d378248e886ee96f55d956ff0856ba3f2eae9f15a10136e68f450ca70","sha512":"61f4bb9acbba2561d6955e226c265da8580e55737249254d345d70033c9bf375f8ab0b16e5064f7881b57a9f1785e0f800c583a762503f3cac58e8c9c74e67cb","ssdeep":"","tlshash":"aff0c0d32fb6bd116632613e99a4c56a6e14eded3801326424a002e76c017658746598","first_seen":"2024-07-12T16:58:11Z","last_seen":"2024-08-19T17:09:42.492325Z","times_seen":38979,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:13.398522954Z","timestamp":1720952413398,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"20A4D98085DF693785B82E60E9D84E87FD28671F922BC560F9A21DFED215639F\"\r\nLast-Modified: Fri, 12 Jul 2024 04:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=12570\r\nExpires: Sun, 14 Jul 2024 13:49:43 GMT\r\nDate: Sun, 14 Jul 2024 10:20:13 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ec8baf60826f2f5b1e572fa2c5333328","sha1":"e5e25bdce94aca9ac7fdba6115d13a7328ccbb26","sha256":"20a4d98085df693785b82e60e9d84e87fd28671f922bc560f9a21dfed215639f","sha512":"ef365e1d194901de019290c79c36a2620eb57c600d0c89dadecb2b0566a91e1b4c79f40014989bdf99313c019f22d863a4e369c73177150fe5ed84eeb9060c52","ssdeep":"","tlshash":"7bf0c922265aba5872a5082954aca40a2d10b6fe288459e97098c2ebe8603a58e6048e","first_seen":"2024-07-12T12:14:29Z","last_seen":"2024-08-19T17:11:10.467251Z","times_seen":8821,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftsafe.top/Main/index2.html","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"ip":{"addr":"198.12.92.242","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-14T10:20:13.336Z","timestamp":1720952413336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftsafe.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jul 2024 16:28:12 GMT","end":"Fri, 04 Oct 2024 16:28:11 GMT"},"fingerprint":{"sha1":"63:20:54:8D:CC:5F:98:2F:F0:B8:FC:F9:A3:67:25:50:13:45:05:06","sha256":"35:4A:76:C5:CB:67:8F:37:28:4A:05:D0:63:5C:FB:54:92:0F:6C:1E:5A:C8:95:34:51:9F:D1:24:3F:E0:36:FB"}}},"request":{"raw":"GET /Main/index2.html HTTP/1.1\r\nHost: microsoftsafe.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 13 Aug 2024 10:20:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Feb 2023 06:41:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6669\r\ndate: Sun, 14 Jul 2024 10:20:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6669,"size_decoded":33659,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (542), with CRLF line terminators","md5":"69ab2228cc9dc61ef99936df0d36339f","sha1":"129b207a5db55c3eb670e8f4d2d245d6d2a90136","sha256":"d75fa5bfff076cbd74454ba24f37eabc6a4e9d2111f6c6f23b12f1671ff446f4","sha512":"ea402124ac4147c6415796d002048b98f8ae4d5a15cc74d124adafa6619f7663737399734bfaeaf4915030f9eeec95e03abe30d1710a2281920a9dfb87e4af99","ssdeep":"384:Vy/yLyUP+Wu+GE+mu1t1ZJT549nS3VQyNQP:j1uyxytFGLyk","tlshash":"13e2b6a4bc920e36417ac2b9b6706d01ff379a07a20a8fa1357c9d9f3ff35049517992","first_seen":"2024-08-19T16:58:56.123044Z","last_seen":"2024-08-19T16:58:56.123044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":201,"dns":0,"connect":97,"send":0,"wait":106,"receive":2,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-07-13","alert":"Outlook","trigger":"microsoftsafe.top/Main/index2.html","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftsafe.top/Main/arrow_left.svg","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"ip":{"addr":"198.12.92.242","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.944Z","timestamp":1720952413944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftsafe.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jul 2024 16:28:12 GMT","end":"Fri, 04 Oct 2024 16:28:11 GMT"},"fingerprint":{"sha1":"63:20:54:8D:CC:5F:98:2F:F0:B8:FC:F9:A3:67:25:50:13:45:05:06","sha256":"35:4A:76:C5:CB:67:8F:37:28:4A:05:D0:63:5C:FB:54:92:0F:6C:1E:5A:C8:95:34:51:9F:D1:24:3F:E0:36:FB"}}},"request":{"raw":"GET /Main/arrow_left.svg HTTP/1.1\r\nHost: microsoftsafe.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/Main/index2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 21 Jul 2024 10:20:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 20 Jan 2019 16:45:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 246\r\ndate: Sun, 14 Jul 2024 10:20:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":513,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9cc2824ef3517b6c4160dcf8ff7d410","sha1":"8db9aebad84ca6e4225bfdd2458ff3821cc4f064","sha256":"34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58","sha512":"aa3ddab0a1cff9533f9a668aba4fb5e3d75ed9f8aff8a1caa4c29f9126d85ff4529e82712c0119d2e81035d1ce1cc491ff9473384d211317d4d00e0e234ad97f","ssdeep":"","tlshash":"29f0598a41c8fb142ce08050dff8ea28540270c3fb4e5008b1922b18e2ef383f6406f5","first_seen":"2023-04-19T20:10:52Z","last_seen":"2026-04-04T10:00:21.16571Z","times_seen":29645,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_drcggiwi0cystfohuwx04a2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:14.700Z","timestamp":1720952414700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_drcggiwi0cystfohuwx04a2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://microsoftsafe.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 13882\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 17 Dec 2022 08:38:03 GMT\r\netag: 0x8DAE00A033630F3\r\nx-ms-request-id: 288fa2d6-e01e-0078-6049-d54f8f000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56xdx2c1utwbaux000000004ug000000003khw\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13882,"size_decoded":47722,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (32002)","md5":"0d1706188588d1ccacb5fa215305f4e0","sha1":"bcf8ce1384f4bee9936dbd347d59bca5ca82f80a","sha256":"d64189606341f193606185751fe729c76e825d954349848e99e093f09ca98286","sha512":"d60019c0abedb4b6b92e0969b34499a927069d45fba93a3a80ae0180ab8d61e8e0295a355235a48bfa8d346627c880744e48387296009e9835805d0e639d6926","ssdeep":"768:p2MX5Ofo7y+F1tlfretkaKNa4DRN2ym+d/Px2gT18vK5PMjObnJncFHThRUbx3SC:bdF1tlfretkaKNa4DRN2ym+d/Px2gT1F","tlshash":"f723072bf3c8870707d3059d386e483276d2d1990589883c6ee6460fa7faf17eb275a5","first_seen":"2023-03-12T22:51:44Z","last_seen":"2025-02-13T17:12:42.657829Z","times_seen":56,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_f3782014f3739160dbfd.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.939Z","timestamp":1720952413939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_f3782014f3739160dbfd.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 32186\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 07 Dec 2022 05:02:34 GMT\r\netag: 0x8DAD81040AAC077\r\nx-ms-request-id: e62da581-a01e-0014-6349-d5f9b4000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56pxwhhcvw2y2zvs00000005xg000000002bx2\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32186,"size_decoded":109863,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32960)","md5":"19fc5310fdb9795f5569eb904a86447a","sha1":"df36f79089d87f9a1f757e76e14e0fb10f85783d","sha256":"0e2ef54a0f3644ed15e5b535dd3a30b94ba2cbf05631efc41039ae793c8b0efe","sha512":"0c499d5244ad2f8a315255d28e2d43172fb26e5eb73954a65c35e403ca8c32decacfa7415c97b6255d820122ca676c08d2bb2c08a4040f04b5f9ebf29956ca73","ssdeep":"1536:oiTcX6ffjFha4QcuyhKYCcwztq0HNEKcZMiRGsh2:oi4X6QczHCcwztq0iPMiw","tlshash":"1eb3e8da76a5703143e2a2b040af114bf23a493ed80c94bcf529d4d6adb499a117ff7c","first_seen":"2023-03-12T22:51:44Z","last_seen":"2026-02-11T16:56:17.4013Z","times_seen":90,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":230,"dns":165,"connect":23,"send":0,"wait":43,"receive":13,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_85acbcb9234972130506.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.940Z","timestamp":1720952413940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_85acbcb9234972130506.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 5530\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2022 20:12:20 GMT\r\netag: 0x8DAC745B3600473\r\nx-ms-request-id: 12f97ffc-301e-007d-4349-d5c885000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56pxwhhcvw2y2zvs00000005xg000000002bx4\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5530,"size_decoded":15748,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (14775)","md5":"281aa44b6f0bacacfcd3581a74f48ddc","sha1":"1c9dee6e64d6d042d7632cab448b26b921910836","sha256":"28fa8f3ba41d8801e3d95e7128f5b2189a4344ebee1a56d4be7a313959f608e1","sha512":"3478836d525feca9f86a0547c410ecc8b19503b2807f17e0c7008f7f9f6d31fea9153778df373beed8d7f58e16144a60ac40657f5b8805a7466c24c6246f1075","ssdeep":"384:D1IlYO22Ze42yYfeXOh+rF3fW4DZD1zfDv79Xw:elbfJb7Bw","tlshash":"7b62e87abc6015700092e8a7e337d111c3ba6a15385eca31f45dd7ca1f62a06b63ff99","first_seen":"2023-03-09T13:13:34Z","last_seen":"2024-08-19T17:02:18.490889Z","times_seen":4,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":233,"dns":164,"connect":23,"send":0,"wait":58,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_44ba818dfa55d8749503.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.941Z","timestamp":1720952413941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_44ba818dfa55d8749503.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 35786\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2022 20:12:21 GMT\r\netag: 0x8DAC745B3E8CFA6\r\nx-ms-request-id: cfa3c9de-a01e-0004-6b49-d54996000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56pxwhhcvw2y2zvs00000005xg000000002bx3\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35786,"size_decoded":113440,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (64612)","md5":"6c28016b03854533016d0f85d4c8b9fa","sha1":"6ef172d9e1efbfaf8d0bbe7d2240bc25f0c94c8e","sha256":"79af9d6414cc1d900d943eb4e3bfca28338a72e0931ebfd6f93dcc0d7a6abcd2","sha512":"793422a7235c8cb34c8ed81dc9dd934c1f0919238e2c16a41f92e0a5aa051420bce24344a9286da55008d2188b54a09384647d1b1b95f7d427bbcd02b03a97ad","ssdeep":"1536:46Nq4+t8gIRPY0+r5qnWisYoBDkuo7hNCm5g5+eGdXtg2N5P2m:4OgDTMnWWKFq5g5eZu2bem","tlshash":"20b3195522df98bb13e260cd0c6f8f09a4ff0556044cc819eeedd6de5828a46f25fb29","first_seen":"2023-03-12T22:51:45Z","last_seen":"2024-08-19T17:02:18.492299Z","times_seen":4,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":230,"dns":163,"connect":23,"send":0,"wait":59,"receive":12,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_NnFX4S8X6vb-OgGnD82WNA2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.935Z","timestamp":1720952413935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /shared/1.0/content/js/ConvergedLogin_PCore_NnFX4S8X6vb-OgGnD82WNA2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://microsoftsafe.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 112847\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 16 Dec 2022 22:42:00 GMT\r\netag: 0x8DADFB6BF0B914F\r\nx-ms-request-id: 5e04829b-b01e-0065-1849-d520b6000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56xdx2c1utwbaux000000004ug000000003khx\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112847,"size_decoded":402757,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (64616)","md5":"367157e12f17eaf6fe3a01a70fcd9634","sha1":"77f4e1c8c9b300e7952815a0e053970165011712","sha256":"c974a0be091a8f09353472bbb41cb939e48a6796f6d0cf95686a7b4d73aa8490","sha512":"1fb814735b1465181bb89105321bb78f9358f1bf022909bc9fb3187deb36f2ddcd2024cac23c79c9bb3fc7a9b520df4c9f2db4d6626ad1b563523b9669ff4e77","ssdeep":"6144:qkmkaRgleTjKNbIEZD6vXa4JP49OxM+p5uE0HUNCLbG:qkAToIEZD29W+p5EC","tlshash":"06843bec789070b303dba079913f550672b6a444984eca60b52dd9d21fbac1ef227f6d","first_seen":"2023-03-12T22:51:44Z","last_seen":"2026-02-11T16:56:17.398642Z","times_seen":90,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":239,"dns":166,"connect":23,"send":0,"wait":44,"receive":81,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.933Z","timestamp":1720952413933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://microsoftsafe.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 19970\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 04 Aug 2022 19:37:00 GMT\r\netag: 0x8DA7650B37ACC3D\r\nx-ms-request-id: 8e3511e2-501e-0051-6ed7-d52965000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56xdx2c1utwbaux000000004ug000000003khv\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19970,"size_decoded":110586,"mime_type":"text/css","magic":"ASCII text, with very long lines (61177)","md5":"f0e5964f8bbedf73d2d3001623bb663b","sha1":"aadf3504d5e5a93e678487eeb4a63398f2699341","sha256":"9537f00ca371747a97a2acca388f7b2379a7fa7c59bde18c3d2621c0de8de492","sha512":"3e5d4eddfb57e3178811d3dadd3aeb47908d70c92f442485e8eb8137a0bab60927b800f436f3ae740496cabd16e29ec324841721d8fa3e39e00ac2fafe3eaec1","ssdeep":"1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmUSeCgzc6VUg8:xkty6VUz","tlshash":"cbb3c7906d243d269037c73561d1bd87a2211503f637aebbf6263db9cf8968b0b32e45","first_seen":"2023-04-10T19:22:58Z","last_seen":"2026-02-16T10:10:27.931111Z","times_seen":1816,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":232,"dns":168,"connect":21,"send":0,"wait":362,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg","fqdn":"logincdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.21.175","port":443,"asn":15133,"as":"EDGECAST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.943Z","timestamp":1720952413943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 07 Jun 2024 00:12:55 GMT","end":"Mon, 02 Jun 2025 00:12:55 GMT"},"fingerprint":{"sha1":"E7:6D:CE:EF:C7:38:13:C8:43:22:C2:9D:D1:1B:1D:A0:B9:03:8E:9E","sha256":"4A:5C:5C:DC:F9:D2:DD:8A:B4:D9:EE:81:E8:69:CC:F0:D9:B0:DA:BF:91:5A:62:6C:51:F8:82:D9:C1:4D:BF:63"}}},"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1\r\nHost: logincdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 9303336\r\ncache-control: public, max-age=31536000\r\ncontent-md5: nzaLxFgP7ZB3dfMcaybWzw==\r\ncontent-type: image/svg+xml\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\netag: 0x8D79ED29CF0C29A\r\nlast-modified: Wed, 22 Jan 2020 00:32:50 GMT\r\nserver: ECAcc (ska/F76D)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: dcd7e33a-001e-004b-6a3a-81ac20000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 1435\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1435,"size_decoded":3651,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-04-04T12:00:16.362544Z","times_seen":122145,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":585,"dns":0,"connect":7,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg","fqdn":"logincdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.21.175","port":443,"asn":15133,"as":"EDGECAST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:14.632Z","timestamp":1720952414632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 07 Jun 2024 00:12:55 GMT","end":"Mon, 02 Jun 2025 00:12:55 GMT"},"fingerprint":{"sha1":"E7:6D:CE:EF:C7:38:13:C8:43:22:C2:9D:D1:1B:1D:A0:B9:03:8E:9E","sha256":"4A:5C:5C:DC:F9:D2:DD:8A:B4:D9:EE:81:E8:69:CC:F0:D9:B0:DA:BF:91:5A:62:6C:51:F8:82:D9:C1:4D:BF:63"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1\r\nHost: logincdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 8977083\r\ncache-control: public, max-age=31536000\r\ncontent-md5: DhdidjYrlCeaRJJRG/y9mA==\r\ncontent-type: image/svg+xml\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\netag: 0x8D7B00724D9E930\r\nlast-modified: Wed, 12 Feb 2020 22:01:42 GMT\r\nserver: ECAcc (ska/F732)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 0798d44a-b01e-0030-7832-847b37000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 673\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":1864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-04-04T11:00:17.024839Z","times_seen":102167,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:13.933Z","timestamp":1720952413933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 19970\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 04 Aug 2022 19:37:00 GMT\r\netag: 0x8DA7650B37ACC3D\r\nx-ms-request-id: 8e3511e2-501e-0051-6ed7-d52965000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56pxwhhcvw2y2zvs00000005xg000000002bxs\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19970,"size_decoded":110586,"mime_type":"text/css","magic":"ASCII text, with very long lines (61177)","md5":"f0e5964f8bbedf73d2d3001623bb663b","sha1":"aadf3504d5e5a93e678487eeb4a63398f2699341","sha256":"9537f00ca371747a97a2acca388f7b2379a7fa7c59bde18c3d2621c0de8de492","sha512":"3e5d4eddfb57e3178811d3dadd3aeb47908d70c92f442485e8eb8137a0bab60927b800f436f3ae740496cabd16e29ec324841721d8fa3e39e00ac2fafe3eaec1","ssdeep":"1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmUSeCgzc6VUg8:xkty6VUz","tlshash":"cbb3c7906d243d269037c73561d1bd87a2211503f637aebbf6263db9cf8968b0b32e45","first_seen":"2023-04-10T19:22:58Z","last_seen":"2026-02-16T10:10:27.931111Z","times_seen":1816,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":232,"dns":168,"connect":21,"send":0,"wait":362,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_drcggiwi0cystfohuwx04a2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:14.700Z","timestamp":1720952414700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6A:6B:06:6C:38:1D:81:38:3D:3B:76:61:6D:C7:02:CD:B4:A1:F5:AD","sha256":"D1:97:1B:C2:0B:1F:EB:FD:E2:87:C1:FF:57:86:B6:39:C8:7F:8C:08:C2:B5:09:8B:A1:BE:2F:B1:05:3B:5C:53"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_drcggiwi0cystfohuwx04a2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 13882\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 17 Dec 2022 08:38:03 GMT\r\netag: 0x8DAE00A033630F3\r\nx-ms-request-id: 288fa2d6-e01e-0078-6049-d54f8f000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20240714T102014Z-158d5f487b56pxwhhcvw2y2zvs00000005xg000000002bxt\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13882,"size_decoded":47722,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (32002)","md5":"0d1706188588d1ccacb5fa215305f4e0","sha1":"bcf8ce1384f4bee9936dbd347d59bca5ca82f80a","sha256":"d64189606341f193606185751fe729c76e825d954349848e99e093f09ca98286","sha512":"d60019c0abedb4b6b92e0969b34499a927069d45fba93a3a80ae0180ab8d61e8e0295a355235a48bfa8d346627c880744e48387296009e9835805d0e639d6926","ssdeep":"768:p2MX5Ofo7y+F1tlfretkaKNa4DRN2ym+d/Px2gT18vK5PMjObnJncFHThRUbx3SC:bdF1tlfretkaKNa4DRN2ym+d/Px2gT1F","tlshash":"f723072bf3c8870707d3059d386e483276d2d1990589883c6ee6460fa7faf17eb275a5","first_seen":"2023-03-12T22:51:44Z","last_seen":"2025-02-13T17:12:42.657829Z","times_seen":56,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftsafe.top/Main/favicon.ico","fqdn":"microsoftsafe.top","domain":"microsoftsafe.top","tld":"top"},"ip":{"addr":"198.12.92.242","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftsafe.top/Main/index2.html","date":"2024-07-14T10:20:14.670Z","timestamp":1720952414670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftsafe.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jul 2024 16:28:12 GMT","end":"Fri, 04 Oct 2024 16:28:11 GMT"},"fingerprint":{"sha1":"63:20:54:8D:CC:5F:98:2F:F0:B8:FC:F9:A3:67:25:50:13:45:05:06","sha256":"35:4A:76:C5:CB:67:8F:37:28:4A:05:D0:63:5C:FB:54:92:0F:6C:1E:5A:C8:95:34:51:9F:D1:24:3F:E0:36:FB"}}},"request":{"raw":"GET /Main/favicon.ico HTTP/1.1\r\nHost: microsoftsafe.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftsafe.top/Main/index2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 14 Jul 2025 10:20:14 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 07 Feb 2023 14:30:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 419\r\ndate: Sun, 14 Jul 2024 10:20:14 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419,"size_decoded":17174,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-04-04T11:13:35.307865Z","times_seen":163403,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-14","alert":"Sinkholed","trigger":"microsoftsafe.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:15.350816997Z","timestamp":1720952415350,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B76186C793CDE690AF253F9096553D00DFFD54DC33FAF5B9A7059B5CE61DE651\"\r\nLast-Modified: Sat, 13 Jul 2024 05:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11654\r\nExpires: Sun, 14 Jul 2024 13:34:29 GMT\r\nDate: Sun, 14 Jul 2024 10:20:15 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"80ee007415e4a9cd9ff180ee56d4fd90","sha1":"08276896e8774d12a699400ffe88939d02acd056","sha256":"b76186c793cde690af253f9096553d00dffd54dc33faf5b9a7059b5ce61de651","sha512":"9aef5dde7a8c139e89cd83acf1c8b6a05e9d41e78c336550035609341942ad6d92ee42f3ff07a8b4301372a22e7eae3de1d6495124e51dd5e8bbae36c1af0ada","ssdeep":"","tlshash":"9df0c99028ac39a2a8a614269ceda76a8d10bce5300009dc388486e3e9527ebb1c045c","first_seen":"2024-07-13T09:16:33Z","last_seen":"2024-08-19T17:04:57.5713Z","times_seen":47007,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-14T10:20:15.352550982Z","timestamp":1720952415352,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B76186C793CDE690AF253F9096553D00DFFD54DC33FAF5B9A7059B5CE61DE651\"\r\nLast-Modified: Sat, 13 Jul 2024 05:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11654\r\nExpires: Sun, 14 Jul 2024 13:34:29 GMT\r\nDate: Sun, 14 Jul 2024 10:20:15 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"80ee007415e4a9cd9ff180ee56d4fd90","sha1":"08276896e8774d12a699400ffe88939d02acd056","sha256":"b76186c793cde690af253f9096553d00dffd54dc33faf5b9a7059b5ce61de651","sha512":"9aef5dde7a8c139e89cd83acf1c8b6a05e9d41e78c336550035609341942ad6d92ee42f3ff07a8b4301372a22e7eae3de1d6495124e51dd5e8bbae36c1af0ada","ssdeep":"","tlshash":"9df0c99028ac39a2a8a614269ceda76a8d10bce5300009dc388486e3e9527ebb1c045c","first_seen":"2024-07-13T09:16:33Z","last_seen":"2024-08-19T17:04:57.5713Z","times_seen":47007,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}