{"report_id":"771804ab-350b-4e9c-8524-24b6bbb723f1","version":0,"status":"done","tags":[],"date":"2026-10-16T14:40:08Z","url":{"schema":"http","addr":"msteam.cc/","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"ip":{"addr":"178.16.54.253","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"msteam.cc/meeting.php","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"title":"Teams Meeting","dom":{"size":7403,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1390e4edf7255e6a08c8f404f46b0a02","sha1":"ba08ed4bbef68bf69a54f1150dbf65c2d3e12bcb","sha256":"128e14e3930840ad06587bb970c9cac655ad735ca01113acb5eff2bf744349c4","sha512":"db8a62c0a5c21105fc42c70b32d383d040e09f1e2ae4103d6a751381f76450719fc72067c502549b0c7cd802860631c3c82bb0459edf628822efeb91407a734f","ssdeep":"192:f3G265dL4BmgxmeufF8xfmghS6XIC7yJoMgiM6IN9w:W9fF8rddiLV","tlshash":"81e186b625a3283547a3c0e12bb7d70936a84007ee0ed5683edd919c4fd0a99d1b3bd8","dom_hash":"domhash8a8d78a2b5ba38be1de36a5dc070e8a6","first_seen":"2026-10-16T14:40:14.093308Z","last_seen":"2026-10-16T15:27:55.286217Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"msteam.cc/","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"ip":{"addr":"178.16.54.253","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T14:40:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"msteam.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"msteam.cc","ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":8532,"sent_data":967,"comment":"","tags":null,"fingerprints":null},{"fqdn":"teams.microsoft.com","ip":{"addr":"52.123.128.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1991-05-02","domain_rank":123,"first_seen":"2017-01-30T04:42:05Z","last_seen":"2026-10-15T08:04:02.480621Z","alert_count":0,"request_count":1,"received_data":716,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"teams.public.onecdn.static.microsoft","ip":{"addr":"104.18.19.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-05","domain_rank":0,"first_seen":"2026-05-06T15:25:20.122179Z","last_seen":"2026-10-15T08:04:02.483722Z","alert_count":0,"request_count":1,"received_data":92806,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"msteam.cc/meeting.php","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a41d453dd9aba63397d4997fe91803d","sha1":"5f4965a04dde7074289562ba4866c36b4f9dbf15","sha256":"6cf9eaab5bfabce6fb14181db54a29aa5ed63428549737060fc542b16393c64e","sha512":"64d293e5af73c3c6fd7532a2661f0a96eb7189c6c26e957fd02a4629c3b731e1dd3d9ac835672f517e504114e027dade084b95839cb9c3728eec73ee546ad168","ssdeep":"","tlshash":"8451e27b35a3543583fba8fb637b474935a010176c42eaa53d5cc6440f709a5a0b2be4","size":2480,"data":"","first_seen":"2026-10-16T14:40:14.114191Z","last_seen":"2026-10-16T15:27:55.301622Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"msteam.cc/","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T14:39:37.160Z","timestamp":1792161577160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.msteam.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 20:04:16 GMT","end":"Mon, 04 Jan 2027 20:04:15 GMT"},"fingerprint":{"sha1":"1B:86:D5:53:E2:FC:31:BF:2D:60:87:46:22:47:D0:5E:01:9A:EC:23","sha256":"5F:B2:3E:D7:33:54:6F:28:50:C9:BE:4D:4F:4C:8E:77:DD:FC:F1:0E:64:0C:34:CA:B0:C4:12:F8:1F:D2:8A:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: msteam.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nlocation: meeting.php\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 16 Oct 2026 14:39:38 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T20:26:20.142157Z","times_seen":19152057,"resource_available":true,"data":null}},"time_used":1496,"timings":{"blocked":-1,"dns":288,"connect":95,"send":0,"wait":925,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"msteam.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msteam.cc/meeting.php","fqdn":"msteam.cc","domain":"msteam.cc","tld":"cc"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T14:39:38.670Z","timestamp":1792161578670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.msteam.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 20:04:16 GMT","end":"Mon, 04 Jan 2027 20:04:15 GMT"},"fingerprint":{"sha1":"1B:86:D5:53:E2:FC:31:BF:2D:60:87:46:22:47:D0:5E:01:9A:EC:23","sha256":"5F:B2:3E:D7:33:54:6F:28:50:C9:BE:4D:4F:4C:8E:77:DD:FC:F1:0E:64:0C:34:CA:B0:C4:12:F8:1F:D2:8A:B3"}}},"request":{"raw":"GET /meeting.php HTTP/1.1\r\nHost: msteam.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 16 Oct 2026 14:39:38 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7700,"size_decoded":2910,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b84c892b31835d502dd7159d01aba881","sha1":"929f4bb52bea667d5b71429df6215fe738c396b6","sha256":"ce01ca391983910469a5cfcef06d9f0a962c6f21681d6d69a91113108c995650","sha512":"bf774a916f7de163af82284540be445fd66f4e0dbe75a92bc8ac9ad774065ac0085a1f49bd6118435e8f70ecd877dd09d54924739b8165f4d7a1c965294106ca","ssdeep":"96:M+57XFuJak+yXl4l8ggfimuDETkYoreR/VTiy7dTnRo:vXM0k+yV4PgfimuDETforOTisO","tlshash":"17f155e9654729264373c6f167724308fae050279f0653683edd528a1ff19a8c5a3fec","first_seen":"2026-10-16T14:40:14.099982Z","last_seen":"2026-10-16T15:27:55.300278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"msteam.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams.microsoft.com/favicon.ico","fqdn":"teams.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"52.123.128.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://msteam.cc/meeting.php","date":"2026-10-16T14:39:39.555Z","timestamp":1792161579555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams.microsoft.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 08 Dec 2025 19:36:22 GMT","end":"Thu, 03 Dec 2026 19:36:22 GMT"},"fingerprint":{"sha1":"2B:46:BC:AF:E6:D3:35:D2:A1:86:00:48:CF:44:81:B5:C6:BA:9F:66","sha256":"1F:FB:CE:5F:21:57:6A:34:BE:98:7F:38:A2:37:46:6E:FA:74:9B:2F:2D:6F:41:29:BB:3A:DD:76:25:97:8F:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: teams.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncache-control: public,max-age=31536000\r\nlocation: https://teams.public.onecdn.static.microsoft/hashed/favicon/prod/favicon-f1722d9.ico\r\nstrict-transport-security: max-age=31536000\r\nx-ring-info: web: general [assigned], mt: general [assigned]\r\nrequestid: 518d3a092de2737880118eee7a80bcdc\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-envoy-upstream-service-time: 11\r\nx-request-id: 12189d5a-9989-4add-8ea9-9b3166c6eb2e\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 2EA92578C5FC41F0AA8B09FACEB95B41 Ref B: OSL231050214042 Ref C: 2026-10-16T14:39:40Z\r\ndate: Fri, 16 Oct 2026 14:39:39 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T20:26:20.142157Z","times_seen":19152057,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":8,"connect":4,"send":0,"wait":46,"receive":0,"ssl":737},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams.public.onecdn.static.microsoft/hashed/favicon/prod/favicon-f1722d9.ico","fqdn":"teams.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"104.18.19.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://msteam.cc/meeting.php","date":"2026-10-16T14:39:40.363Z","timestamp":1792161580363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res-8.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 19 May 2026 15:20:28 GMT","end":"Thu, 03 Dec 2026 15:20:28 GMT"},"fingerprint":{"sha1":"50:99:34:6A:9C:91:87:04:BC:7A:4C:BE:29:2F:0D:E3:D9:3D:D4:DC","sha256":"0B:28:7F:83:F6:48:6D:D3:11:5D:10:17:0B:26:2D:75:8D:3A:63:C9:C8:98:71:1B:14:07:BA:4B:F5:BA:31:CA"}}},"request":{"raw":"GET /hashed/favicon/prod/favicon-f1722d9.ico HTTP/1.1\r\nHost: teams.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ncontent-type: image/x-icon\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nlast-modified: Wed, 28 May 2025 21:41:05 GMT\r\nx-cdn-storage: teams\r\nserver: cloudflare\r\nx-ms-request-id: a66767d4-601e-001a-152f-3aab2c000000\r\naccess-control-allow-headers: *\r\ntiming-allow-origin: *\r\nx-cdn-provider: Cloudflare\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\ndate: Fri, 16 Oct 2026 14:39:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 1470904\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=CloudflareWorldwide\u0026RequestId=a4b7d07578398be6-OSL\u0026Country=NO\u0026Region=NO-03\u0026ASN=50304\u0026FileSize=91302\u0026CompressionType=\u0026BotScore=17\"}],\"include_subdomains\":true}\r\nset-cookie: __cf_bm=o1f4aeG7e6K9QP8I1lx0TCQ.xHqNMx0yQ7z1VR989as-1792161580.3917227-1.0.1.1-IFigRsy5B5lQq3M_hvApc00hlnVbRkcbMQS2ULcb5YZsH0XZUiTRyAoyvP9rVI0XZThITG9day8AenYWVMKl6j0MRrz39bQbyreTupE3aVi9ZGkig7Zm0e3Y04f3wMk2; HttpOnly; SameSite=None; Secure; Path=/; Domain=public.onecdn.static.microsoft; Expires=Fri, 16 Oct 2026 15:09:40 GMT\r\ncf-ray: a4b7d07578398be6-OSL\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"o1f4aeG7e6K9QP8I1lx0TCQ.xHqNMx0yQ7z1VR989as-1792161580.3917227-1.0.1.1-IFigRsy5B5lQq3M_hvApc00hlnVbRkcbMQS2ULcb5YZsH0XZUiTRyAoyvP9rVI0XZThITG9day8AenYWVMKl6j0MRrz39bQbyreTupE3aVi9ZGkig7Zm0e3Y04f3wMk2","quoted":false,"path":"/","domain":"public.onecdn.static.microsoft","expires":"2026-10-16T15:09:40Z","raw_expires":"Fri, 16 Oct 2026 15:09:40 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=o1f4aeG7e6K9QP8I1lx0TCQ.xHqNMx0yQ7z1VR989as-1792161580.3917227-1.0.1.1-IFigRsy5B5lQq3M_hvApc00hlnVbRkcbMQS2ULcb5YZsH0XZUiTRyAoyvP9rVI0XZThITG9day8AenYWVMKl6j0MRrz39bQbyreTupE3aVi9ZGkig7Zm0e3Y04f3wMk2; HttpOnly; SameSite=None; Secure; Path=/; Domain=public.onecdn.static.microsoft; Expires=Fri, 16 Oct 2026 15:09:40 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":91302,"size_decoded":13287,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 8 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 256x256 with \n- PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"2b4509d8a869917bbc5ce10982956619","sha1":"dc21bd40ed9b873779f855026f253bdd3322723d","sha256":"397eddf44e1bf7e557b0b4f5173da95d8fd832b6f2f10d6e41c17dc539d5a822","sha512":"2d0a54e85c7bbdd653b1557a3741d44b621876503d6e8b8cfd5fc6bd3047e28b9702dfb132474dd3981174d96f994b46083008a327646c8d16467e80da164bab","ssdeep":"1536:59iJX9Lgm9iJX9Lgm9iJX9Lg/jHXZwuumF:54p4p4qXZwuumF","tlshash":"bd9370d65ae5a182f6c44bb0dc43b3b077905d7f15344812aa62f6ddb87f608c812afe","first_seen":"2023-04-18T22:03:06Z","last_seen":"2026-10-16T15:27:55.299059Z","times_seen":1019,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":5,"connect":22,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}