{"report_id":"51e1426c-6b67-4479-a633-dac73cf2fe2a","version":6,"status":"done","tags":[],"date":"2026-06-01T06:50:06Z","url":{"schema":"http","addr":"msteam-analytics.com","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.7","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"msteam-analytics.com/login","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"title":"Pace","dom":{"size":5090,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1748)","md5":"4ddf4a072f970d0cb74f131e475a9528","sha1":"9371a988c16b5c5d213c4e0819283d8f608d1f3f","sha256":"397996872d4f2de542063514e5bf79a1e8e87f63557d2aa71c88cc860dcea2bc","sha512":"8187757d2e18952303d5ce42aa32deb19640ba193b5e2705d2239035b3aa201a87b9a809e205c3f2e5cfec531730a745ffe086596d5b791adf419b4349613166","ssdeep":"96:nz4MEg9n00jmW235GqgHIj/Gxu+qDp+uRAylKAp+7M1AhfEgKyTOTvdMokFykFQ4:z4MV900jw3YHIj/GxjqDsuRblKAs7M1I","tlshash":"a0b19473e560191b83134369b8deb90c592fea0bd647e089e6ec93695bc1e8381e335c","dom_hash":"domhash6dff79761baf6da40465b6295c4b9521","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"msteam-analytics.com","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.7","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T06:50:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"base44.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"msteam-analytics.com","ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":1431922,"sent_data":4215,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1680,"comment":"","tags":null,"fingerprints":null},{"fqdn":"base44.app","ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"2025-02-09","domain_rank":90306,"first_seen":"2025-03-20T08:46:18.355413Z","last_seen":"2026-05-26T00:15:05.925824Z","alert_count":1,"request_count":1,"received_data":9748,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":15766,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"msteam-analytics.com/assets/index-BKeJVXhe.js","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d2b00ad0361ebde11c593076e61f64","sha1":"8c5ffad19001fd61a20edf964e52c942f663c6d0","sha256":"b53139236444ba59b846c26d669f04ee80c839fd31e53bec9d3180923625211e","sha512":"b91ba22e53b799f1852c666668dca37b97e7564976d1eef383f91d77dd43e6c60750c08562d758e4e8d532236c14a82c90357fab6ef8f5e6b5ec6fe4a6281406","ssdeep":"24576:0DUJ6LFt9EpqBrhXQwWL89Xgs/86zd3mEQEdaQyZ9r6:0DUJ6LFt9EpqBrhXQw9gs/86zd3/ynm","tlshash":"2e555cc471dbb56a83a352f1007f2007f1386d15984e9c50f265e9e53db8c8a91bbfba","size":1345721,"data":"","first_seen":"2026-06-01T06:50:13.110095Z","last_seen":"2026-06-01T06:50:41.931704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"msteam-analytics.com/api/app-logs/6a0cc92ca625f0ad8be174f0/log-user-in-app/home","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"POST /api/app-logs/6a0cc92ca625f0ad8be174f0/log-user-in-app/home HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 20\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Request-ID, X-Error-Code, x-wix-request-id\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: f3aaf8c7-3404-4599\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a04c46546f7ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-07T08:20:47.020217Z","times_seen":153963,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":586,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/api/apps/6a0cc92ca625f0ad8be174f0/analytics/track/batch","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"POST /api/apps/6a0cc92ca625f0ad8be174f0/analytics/track/batch HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nContent-Type: application/json\r\nX-App-Id: 6a0cc92ca625f0ad8be174f0\r\nX-Origin-URL: https://msteam-analytics.com/\r\nContent-Length: 190\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":190,"data":"{\"events\":[{\"event_name\":\"__initialization_event__\",\"properties\":{\"referrer\":\"\"},\"timestamp\":\"2026-06-01T06:48:48.002Z\",\"page_url\":\"/\",\"user_id\":null,\"session_id\":\"ga1inyz6rl9zmxbyo5z63b\"}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 18\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Request-ID, X-Error-Code, x-wix-request-id\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: e24e4aeb-f665-41f3\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a04c4655d86fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e429df1a22e7d9356a95dec9530e5396","sha1":"16549028e0fa19014d65eda12c44d95581f5ea27","sha256":"31afafe7ddcefe80ed34aaf3ffb13f8b70904529a45f35ee02357ac44b1331ed","sha512":"c92f0c8d98694aab2885c89306f36b169f57a2639ba150ac3f2b16aa50c65d534b281107efba56cc3258e11996e2859442563c3b6629767f441a62aa7d2c41cd","ssdeep":"","tlshash":"c46000003f000cc0000000c3000003c3c0003030003030ccc003000000c3c00000c000","first_seen":"2026-01-11T21:59:27.029211Z","last_seen":"2026-06-07T07:51:53.472345Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/api/apps/public/prod/public-settings/by-id/6a0cc92ca625f0ad8be174f0","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"GET /api/apps/public/prod/public-settings/by-id/6a0cc92ca625f0ad8be174f0 HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nX-App-Id: 6a0cc92ca625f0ad8be174f0\r\nX-Origin-URL: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 62\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: b6cd0f6d-0eeb-406e\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a04c46549fb1a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"519cc94491dd5b6f0e3e9b593bceca5d","sha1":"572c90843d2ae047d98a1dd366dbf2c6d96fb3a1","sha256":"2666f7bf5700530eaecce8a18274a4768ae7e355cb5d56aea026cbe7b4a68e23","sha512":"8b2cec34a40663518ee2bb8bb8b5a87ca3062634c195dfa7079a3087f71bd81417492305bdca93b17fda7d1a3033f6d431fc15ae15f37f798c0d55c583a3c1c4","ssdeep":"","tlshash":"c2a02203c23c0ca882e80a33ec022332002300fe0cccaffa3038a30a08e002283002f3","first_seen":"2026-06-01T06:50:13.103251Z","last_seen":"2026-06-01T06:50:41.919767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363742\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/api/app-logs/6a0cc92ca625f0ad8be174f0/log-user-in-app/login","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"POST /api/app-logs/6a0cc92ca625f0ad8be174f0/log-user-in-app/login HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/login\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 20\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Request-ID, X-Error-Code, x-wix-request-id\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: cd5d417a-4f82-436f\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a04c4655f87da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-07T08:20:47.020217Z","times_seen":153963,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363742\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base44.app/logo_v3.png","fqdn":"base44.app","domain":"base44.app","tld":""},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:06:38 GMT","end":"Thu, 13 Aug 2026 15:06:37 GMT"},"fingerprint":{"sha1":"61:D6:59:D9:84:6E:3D:E0:97:0D:BC:08:C7:8D:E6:33:C0:34:70:9E","sha256":"3A:C0:66:19:BF:85:B4:B4:38:AA:3E:31:14:44:7B:EF:69:FC:6C:2D:45:F1:06:A9:6A:C0:EA:FB:9D:13:9B:4A"}}},"request":{"raw":"GET /logo_v3.png HTTP/1.1\r\nHost: base44.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 9180\r\naccept-ranges: bytes\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: accept-encoding\r\netag: \"2d2a4c0e27c5a66d362991a492974e87\"\r\nlast-modified: Mon, 01 Jun 2026 06:36:26 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: a11f2c0a-8aa5-477b\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: BYPASS\r\ncf-ray: a04c4658698a569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1576 x 1575, 8-bit colormap, non-interlaced","md5":"4dae68b9cd74608f596c446728c054f0","sha1":"78204a990ecd828bc7f9c86d1b3fc9da275e358d","sha256":"2b7f1147dc9b0637424faa327f2b7459d319e6fe90f11206d1d321cbced507f5","sha512":"b319adbd79edf23f5f5972dab348ee0e63fd0b120f6ada7986cbd32d3c3dbb95d701285c6217e380d00fc77ee3125e79e54f5957d12e318a20312802a2a60830","ssdeep":"192:j4bq5KXspXQfwzC424NNNN9luZYFNiJOyYNICgDNd/zr/yvzzHcDM0Z3:j3c74LNNNN9lSaNiuNICgBd/H/yzm","tlshash":"19129f4c62cd4a95e65ffc7dfa7ec604fb78313029864112505629e68b1be1211dcf04","first_seen":"2026-04-03T21:02:29.289582Z","last_seen":"2026-06-06T01:32:07.896662Z","times_seen":21,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":33,"connect":1,"send":0,"wait":239,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"base44.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T06:48:46.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1322\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: a5dd462a-beb0-404b\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a04c46490c4a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4377,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1447c507b0a6753ce92facca1bdb5d15","sha1":"b0c84b5056667e2698b925e0b96d3b2b61308e97","sha256":"d39c631df0b4e0363d9118ce90e05134500fa281f0b2793118257833c7127750","sha512":"05fa33c7a56be9a0d26ffabccef93a7a6490422bc0fc0c79900b40305af1cca4c559765033241ec239f7b746d28f84edc5fdd46db64339b3934516febf5b39c9","ssdeep":"96:OK06FW235GqgHIj/Gxu+U+fi+A9XyTOuc+mZuUdZ:OGl3YHIj/GxjVPhkuUdZ","tlshash":"fb916513e5b00419c261431a6dabb418af2be807e64af409b5dc9b8d9fd2f5185e778c","first_seen":"2026-06-01T06:50:13.105443Z","last_seen":"2026-06-01T06:50:41.929336Z","times_seen":2,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":29,"dns":8,"connect":1,"send":0,"wait":619,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/assets/index-D9K_SxYv.css","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:47.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"GET /assets/index-D9K_SxYv.css HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 01 Jun 2026 06:48:47 GMT\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: c30b9a73-b81a-484c\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: a04c464dfa51a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77227,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af9d46b797065573a54809b1581bc269","sha1":"e28a7ac0bea60ed59f022ba619e7bd763367ce01","sha256":"cca4292d5e7409d82ba40e0ed35451d0f62c14344cdd01c0190e666744c534eb","sha512":"f843e71516e07b054ee654539f89418e9ed0bbc4b0fbb03f24a5185094a6a3fe77525a9637e73c12a375901fc26cc6c05016657f80ce47327d3bd235a09133b1","ssdeep":"1536:ayh7h8HU1EQfkISg0M/k6eUGhQJ378VQZkt5FtCoRD:ayh7h8HU1PkISg0Mc6eUGhQJ378VQZk7","tlshash":"f873841db519a13e3c2790e883ccb9ec611af0c0de3a06b5be9a42315ac37f65db7558","first_seen":"2026-06-01T06:50:13.106449Z","last_seen":"2026-06-01T06:50:41.923783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/assets/index-BKeJVXhe.js","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"GET /assets/index-BKeJVXhe.js HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 06:48:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 01 Jun 2026 06:48:47 GMT\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: a242aaf6-eb05-422e\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: a04c464dfa4fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37900)","md5":"e7f0fad2ff3f298ce2045ffad3030357","sha1":"8550da44dfcddc2555f00d3798d279955ae61ebb","sha256":"75b2ef4ff75195d8b332f39d9c16cda29b9a68b48249ed35da510b2bd2bcc9ea","sha512":"c44002a465be366b0f3511cba6c7c72c2ed4c1f4185e67453a136dee9aa43a7546cd5a96c868770610e6324901c563f22b9f88565a1acc97dcdd5c829adf9dab","ssdeep":"24576:0DUJ6LFt9EpqgrvXQyWL89Xgs/86zd3mA:0DUJ6LFt9EpqgrvXQy9gs/86zd37","tlshash":"82255cd871dbb16a83a356b5007f2007f1386d15944e8c50f224eae53db8d8a91fbfb9","first_seen":"2026-06-01T06:50:13.107375Z","last_seen":"2026-06-01T06:50:13.107375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:47.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 01 Jun 2026 06:48:47 GMT\r\ndate: Mon, 01 Jun 2026 06:48:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"596063bb7b647bd572dab5e8a6c5ae8a","sha1":"06140162c1a4889b7328db4f12c3455caca89dd2","sha256":"f0fb472eed8e5d53dac4b947db18425cc50c77f9f7cf25228089df594503a68c","sha512":"d1d854cd93a4cb2d89526edc378dd27018ac7d9b83bf6e9e18a83fc065c522a985468cddab745fa5a612d69e53db04bca144e332370a06bba957de541cf34147","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGgG+7p3ZAXYjG9Up3qnX9:vXuM0p2+QOGCE","tlshash":"a662bb92002ba400ab871cc673cf7e3aadce504a6085d5b99ffe0d895ceec66537875d","first_seen":"2025-12-05T17:57:30.40282Z","last_seen":"2026-06-07T02:37:14.216397Z","times_seen":533,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":127,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:47.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://msteam-analytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363741\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":127,"dns":1,"connect":28,"send":0,"wait":28,"receive":38,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msteam-analytics.com/api/apps/6a0cc92ca625f0ad8be174f0/entities/User/me","fqdn":"msteam-analytics.com","domain":"msteam-analytics.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msteam-analytics.com/","date":"2026-06-01T06:48:48.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msteam-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 14:40:25 GMT","end":"Fri, 28 Aug 2026 15:39:31 GMT"},"fingerprint":{"sha1":"EC:02:6A:79:E8:05:3D:30:05:13:B5:2B:7B:98:11:03:EF:25:D4:0D","sha256":"64:5C:92:1E:71:5D:A8:A4:0E:5B:DF:80:AC:14:F7:97:96:B2:40:69:54:ED:92:56:28:82:33:F5:71:AD:DB:DD"}}},"request":{"raw":"GET /api/apps/6a0cc92ca625f0ad8be174f0/entities/User/me HTTP/1.1\r\nHost: msteam-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://msteam-analytics.com/\r\nX-App-Id: 6a0cc92ca625f0ad8be174f0\r\nX-Origin-URL: https://msteam-analytics.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Mon, 01 Jun 2026 06:48:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 122\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 3cb77368-c645-416a\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a04c46545f78a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62508598590abe8e69d9cc2c9fcbdc03","sha1":"e89f180d78ee2550e3b23fc57bc5ac3e594aeceb","sha256":"229a801afc84656154668655fc061817f95379074c71ba8596d43f7fd135b18d","sha512":"996b6958fea93180d8beb0ffd2e95207f1c6a89d9bd63d62356eca8601a5c0ac165d776264508b1b1083a86844c47426efb8b280e4401c0bf8235313bfd56b62","ssdeep":"","tlshash":"6ec08cd5e2d81c564e63238379507e4023adf42b01415c222159fa6822e913cd3eb2a4","first_seen":"2026-02-25T15:48:26.461491Z","last_seen":"2026-06-07T07:51:53.467271Z","times_seen":882,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}