{"report_id":"78df6137-1779-4739-acaf-53a0c35ad31d","version":6,"status":"done","tags":[],"date":"2026-03-13T19:52:26Z","url":{"schema":"https","addr":"dynamic-entry.powerappsportals.com/dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue","fqdn":"dynamic-entry.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.66","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"title":"\u003cspan id=\"domain-name\"\u003e\u003c/span\u003e","dom":{"size":6455,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"61041e7f1d65adb02460f6de8a174106","sha1":"3f39de6f16eaceadd47f576845528c9fa5d9d42b","sha256":"6bf438b44d1dd080ff745ae5163b3186e1fbf30f8ac7aa86ad9dfd56a8c61432","sha512":"3e9f0f27b167aaaced49d5b5b93ab9ae9c7623249fc57a6aa89da4d29cafb773f7f4f6b27b76d32014fc705bcd5065f5a94a5e679418ee82a2cd5d7c91e4ef48","ssdeep":"192:h7V/7lT9MHo8PlZFTXww5Q2LdyWbnwnwecB:h7FgFT/OMhbnwPcB","tlshash":"62d14252d1f7185ab003c0a87ff36f0926a4c107c356cd5c3fac66a9df8a98659a339c","dom_hash":"domhash0dbba03886be9dcac515f561ecc605d3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dynamic-entry.powerappsportals.com/dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue","fqdn":"dynamic-entry.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.66","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T19:52:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"dynamic-entry.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"email-internals.powerappsportals.com","ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2019-06-10","domain_rank":0,"first_seen":"2026-02-19T08:19:39.706434Z","last_seen":"2026-03-13T16:59:22.28234Z","alert_count":11,"request_count":11,"received_data":205890,"sent_data":11462,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"logo.clearbit.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2003-07-04","domain_rank":185091,"first_seen":"2015-06-30T16:39:45Z","last_seen":"2026-03-13T05:41:15.64925Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-03-09T01:57:11.385781Z","alert_count":0,"request_count":3,"received_data":437372,"sent_data":1545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"logodix.com","ip":{"addr":"104.26.15.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-12","domain_rank":94453,"first_seen":"2019-05-06T08:16:07Z","last_seen":"2026-03-11T17:47:36.201583Z","alert_count":0,"request_count":2,"received_data":28128,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dynamic-entry.powerappsportals.com","ip":{"addr":"40.112.243.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2019-06-10","domain_rank":0,"first_seen":"2026-02-16T13:09:09.719272Z","last_seen":"2026-03-13T18:30:58.285971Z","alert_count":2,"request_count":2,"received_data":3170,"sent_data":3016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-03-09T09:07:59.447311Z","alert_count":0,"request_count":1,"received_data":74178,"sent_data":625,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-03-11T14:27:37.490585Z","alert_count":0,"request_count":5,"received_data":4001,"sent_data":2520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":3,"received_data":272951,"sent_data":1491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.vecteezy.com","ip":{"addr":"172.64.152.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-04-27","domain_rank":196654,"first_seen":"2012-10-01T18:25:29Z","last_seen":"2026-03-11T18:07:26.495504Z","alert_count":0,"request_count":3,"received_data":178146,"sent_data":2232,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.freepik.com","ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-04","domain_rank":178885,"first_seen":"2013-11-27T18:27:47Z","last_seen":"2026-03-13T19:52:17.386371Z","alert_count":0,"request_count":3,"received_data":18543,"sent_data":1761,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89947,"data":"","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","size":1739,"data":"","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e281d750e7625bdc142b42e07aeb4f97","sha1":"5e834664400e423a45b908688acd3f2b4b08d1d0","sha256":"81140a0d6cf0b2ca8f529fbdd9a266b434c8613e01d2cd824c1a930b9f0c9bd8","sha512":"b1449c538de7b6fb95ed270dfe4a19694cbc9a787b5dff05899822a29a0884503c92ff17a4e9cbbfd401a7f3e3be4e568e67807dd15260bea7ddd065c4cc2da4","ssdeep":"384:yxrkogwjWOlhcN/bxdg/Mi1mXewoC2/uyBdpyA:yxoog6uJb1i1mXe/f5BdpT","tlshash":"4382344fb182f5c1b34b80650cfb3e5fa9ba1cd19f18601d5940e7a67e3497d8262f89","size":18067,"data":"","first_seen":"2026-02-18T09:44:35.996588Z","last_seen":"2026-03-13T19:52:28.289106Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e281d750e7625bdc142b42e07aeb4f97","sha1":"5e834664400e423a45b908688acd3f2b4b08d1d0","sha256":"81140a0d6cf0b2ca8f529fbdd9a266b434c8613e01d2cd824c1a930b9f0c9bd8","sha512":"b1449c538de7b6fb95ed270dfe4a19694cbc9a787b5dff05899822a29a0884503c92ff17a4e9cbbfd401a7f3e3be4e568e67807dd15260bea7ddd065c4cc2da4","ssdeep":"384:yxrkogwjWOlhcN/bxdg/Mi1mXewoC2/uyBdpyA:yxoog6uJb1i1mXe/f5BdpT","tlshash":"4382344fb182f5c1b34b80650cfb3e5fa9ba1cd19f18601d5940e7a67e3497d8262f89","size":18067,"data":"","first_seen":"2026-02-18T09:44:35.996588Z","last_seen":"2026-03-13T19:52:28.289106Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T18:45:27.135232Z","times_seen":594284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"355509d083938beb913c3b8550c53ad7","sha1":"2ab4577b4909bb0cb800cafda4fecb7efd6ddf69","sha256":"b6b0685e830c6f25c35e4ca43ab76a2670e4c9347038f3abd8e0130df5b78095","sha512":"de9107cbe414414a27cbdea45c6828b9c13f8af5b27df2e6aed15d7507e927a54adc61c596bcfbcb18a70c999931a5a303431ed750b0554d32451cd1268dc2fa","ssdeep":"768:+o1feVa9RTJdQc7Qffii9MvMFWQkP5jh0IdjXZAB:+o1feivG4Qnii9VWQoRdTZS","tlshash":"b7f287e667538cb58c33f2afb54e9aa1c929bb67cc6e40f115e0a34c17e573245a10ce","size":37200,"data":"","first_seen":"2026-02-18T09:44:35.998653Z","last_seen":"2026-03-13T19:52:28.290464Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","size":57676,"data":"","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","size":1739,"data":"","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T18:45:27.135232Z","times_seen":594284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e281d750e7625bdc142b42e07aeb4f97","sha1":"5e834664400e423a45b908688acd3f2b4b08d1d0","sha256":"81140a0d6cf0b2ca8f529fbdd9a266b434c8613e01d2cd824c1a930b9f0c9bd8","sha512":"b1449c538de7b6fb95ed270dfe4a19694cbc9a787b5dff05899822a29a0884503c92ff17a4e9cbbfd401a7f3e3be4e568e67807dd15260bea7ddd065c4cc2da4","ssdeep":"384:yxrkogwjWOlhcN/bxdg/Mi1mXewoC2/uyBdpyA:yxoog6uJb1i1mXe/f5BdpT","tlshash":"4382344fb182f5c1b34b80650cfb3e5fa9ba1cd19f18601d5940e7a67e3497d8262f89","size":18067,"data":"","first_seen":"2026-02-18T09:44:35.996588Z","last_seen":"2026-03-13T19:52:28.289106Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"355509d083938beb913c3b8550c53ad7","sha1":"2ab4577b4909bb0cb800cafda4fecb7efd6ddf69","sha256":"b6b0685e830c6f25c35e4ca43ab76a2670e4c9347038f3abd8e0130df5b78095","sha512":"de9107cbe414414a27cbdea45c6828b9c13f8af5b27df2e6aed15d7507e927a54adc61c596bcfbcb18a70c999931a5a303431ed750b0554d32451cd1268dc2fa","ssdeep":"768:+o1feVa9RTJdQc7Qffii9MvMFWQkP5jh0IdjXZAB:+o1feivG4Qnii9VWQoRdTZS","tlshash":"b7f287e667538cb58c33f2afb54e9aa1c929bb67cc6e40f115e0a34c17e573245a10ce","size":37200,"data":"","first_seen":"2026-02-18T09:44:35.998653Z","last_seen":"2026-03-13T19:52:28.290464Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T18:45:27.135232Z","times_seen":594284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","size":57676,"data":"","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"355509d083938beb913c3b8550c53ad7","sha1":"2ab4577b4909bb0cb800cafda4fecb7efd6ddf69","sha256":"b6b0685e830c6f25c35e4ca43ab76a2670e4c9347038f3abd8e0130df5b78095","sha512":"de9107cbe414414a27cbdea45c6828b9c13f8af5b27df2e6aed15d7507e927a54adc61c596bcfbcb18a70c999931a5a303431ed750b0554d32451cd1268dc2fa","ssdeep":"768:+o1feVa9RTJdQc7Qffii9MvMFWQkP5jh0IdjXZAB:+o1feivG4Qnii9VWQoRdTZS","tlshash":"b7f287e667538cb58c33f2afb54e9aa1c929bb67cc6e40f115e0a34c17e573245a10ce","size":37200,"data":"","first_seen":"2026-02-18T09:44:35.998653Z","last_seen":"2026-03-13T19:52:28.290464Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","size":57676,"data":"","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89947,"data":"","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","size":1739,"data":"","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89947,"data":"","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:52:05.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/?state=dk-contact@team.blue HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynamic-entry.powerappsportals.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2495\r\nContent-Type: text/html; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:06 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: -1\r\nPragma: no-cache\r\nSet-Cookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; expires=Thu, 11-Jun-2026 19:52:06 GMT; path=/; secure; HttpOnly; SameSite=Lax\nARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4;Path=/;HttpOnly;Secure;Domain=email-internals.powerappsportals.com\nARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4;Path=/;HttpOnly;SameSite=None;Secure;Domain=email-internals.powerappsportals.com\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: a01ea28a-9042-4d43-82c8-df917fad7e2a\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-YyGXGO/gcYllC1pOs1R31bGG6coBXHTb8WEhHb8r62w=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes'   'sha256-pwQduWxX3Cm7lLbQmAos7n73RLP4QrsCDFejmsBdZ78='; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=a01ea28a-9042-4d43-82c8-df917fad7e2a\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":5859,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"ed9860e89629c3b88060458ab95b7f67","sha1":"03785a61a0c5b810d1adb075c4d2355e3ec10c36","sha256":"f25019b911aa2ed02bcdde8ca0897f84ccfb6490d2674bc239aa498e0a7c47b5","sha512":"161622397d58edb5e4d213dc700148de3531a17dfa6401dbf5efd12d23f827fe7db0fd8fc9979153fbd0a2ec8d4dc7cca0ed86c584fa655723ab639c5777300a","ssdeep":"96:YMV/7nlTIG8Tkko8PlZFTXww5Q2L4rF6P7DIwu5Ja6rG:xV/7lT9MHo8PlZFTXww5Q2LbP7DIwIJY","tlshash":"32c1535295b7085ab003d4b87ff76b052264d507c346cd5c3fac62a8df8668959b339c","first_seen":"2026-03-13T19:52:28.276892Z","last_seen":"2026-03-13T19:52:28.276892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":352,"dns":24,"connect":161,"send":0,"wait":279,"receive":1,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logo.clearbit.com/team.blue","fqdn":"logo.clearbit.com","domain":"clearbit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.385Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /team.blue HTTP/1.1\r\nHost: logo.clearbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:08.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email-internals.powerappsportals.com/\r\nOrigin: https://email-internals.powerappsportals.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Fri, 13 Mar 2026 19:52:08 GMT\r\ncontent-type: text/plain\r\ncontent-length: 109\r\nretry-after: 3590\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbL3u3Jg8YMXP0uFJ33SG7eyCdsFG0fvaT%2BPxyDxo178e2uym%2BCKwYDf0BXE4lYbOlyQHlzd%2F%2BeMgKO4cxc%2FuadWXxwLil4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dbd93ceaa7e45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c3159f773282f6ca3a22581044699ff9","sha1":"85835e662022f3f574110238bc76a0a41756759a","sha256":"172548325ccff37cd04998aefa5ffcaaa343d1f18fc5541fc7bb229994f4d92d","sha512":"12c0f48cf84315f1c6b3c2b0b2cba3825c44705ec68624e4f462e1709bf8d10fe642a99e1ac2d493bf3b2c7e759dea3ab4d6d49314f7abfe979c941faf485e65","ssdeep":"","tlshash":"5cb0124ad1d40b2002d017fd83a9f26cfaa788343aec13b89464307e1651447375dd4c","first_seen":"2026-01-07T00:37:32.012541Z","last_seen":"2026-03-13T19:52:28.279392Z","times_seen":723,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9dbd93c21a7a2efa-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 07/21/2025 22:36:56\r\ncdn-proxyver: 1.32\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 17fcc9596d692e352f93ed34c95eb4da\r\ncdn-cache: HIT\r\nage: 1877264\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-04-04T18:41:50.05316Z","times_seen":53159,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":30,"dns":1,"connect":2,"send":0,"wait":30,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:07.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/site.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 24344\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:08 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: cYTegyLlp6DbEicOzq2THrAXcFK1CklSHf+xcWq2HYk=\r\nExpires: Fri, 13 Mar 2026 20:52:08 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 5137f796-93ed-46b7-b23a-906e3c4f9451\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-FRfHUH+oI133LIG4YYawie04/0LxGb5kLe84KcMMpNo=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=5137f796-93ed-46b7-b23a-906e3c4f9451\r\nContent-Disposition: inline;filename*=UTF-8''script.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57675)","md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1107,"timings":{"blocked":334,"dns":1,"connect":167,"send":0,"wait":262,"receive":167,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logodix.com/logo/14638.png","fqdn":"logodix.com","domain":"logodix.com","tld":"com"},"ip":{"addr":"104.26.15.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logodix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 18:00:04 GMT","end":"Sun, 10 May 2026 18:59:48 GMT"},"fingerprint":{"sha1":"E5:51:7D:19:66:71:B4:B1:C6:28:F6:E8:25:E7:1A:2E:B1:7B:B4:E5","sha256":"0B:6F:28:37:7F:69:3A:03:AD:3E:2D:B9:63:41:2A:97:C6:40:15:2A:98:14:3F:35:B7:B5:6E:15:A2:D8:A5:56"}}},"request":{"raw":"GET /logo/14638.png HTTP/1.1\r\nHost: logodix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27326\r\nlast-modified: Fri, 14 Jul 2023 15:12:03 GMT\r\netag: \"64b165c3-17656\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=14400, 30d\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru24AaFK%2ButV9vgxmzs60K9u%2BL7zWO9qH20fR7bcH5Z%2F%2BAaCJZl6RwJroVq9Q04Qh0sVYpL782%2F0EH%2BhvRwe04cbLRVKiGiLztE%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok, orig_size=95830\r\nvary: accept, accept-encoding\r\nage: 5102\r\ncf-ray: 9dbd93d2caae4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e2a0a8fb4ff71e48f6c79d193c33d5d","sha1":"24061b88da59269f3bea9873e51afe609aee653a","sha256":"c4881944960084903975840ff4886dbae44bc8f61ab340545871cf1fe31b1d98","sha512":"fe8e222d1e56ee6b48eeaa8ae70fc1c0631c6e22c05c96aa142e59da1b52d5601a8ed2f66ef37227e61b5a1760be0e4751e75642cd16b56202bb04b8728470af","ssdeep":"768:HNdHgoQFxcTWT7p1AJbJtdggN8K6XCqaGS:HNtXQFxWKIJbRghHaGS","tlshash":"48c2e185b4892df567073e76028050d69607c9b552f5c2d0d9effa37c289cc4ea48df5","first_seen":"2026-02-18T09:44:35.982556Z","last_seen":"2026-03-13T19:52:28.281318Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-entry.powerappsportals.com/dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue","fqdn":"dynamic-entry.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:52:05.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 19 Feb 2026 11:46:34 GMT","end":"Tue, 18 Aug 2026 11:46:34 GMT"},"fingerprint":{"sha1":"B0:D7:EB:78:47:DD:03:5B:40:FB:70:FD:8A:7A:07:57:2C:4E:E4:DD","sha256":"31:C6:B9:7C:2D:19:06:E4:7A:6A:1D:88:E7:58:51:C8:7C:6E:B0:A6:4F:EF:89:DC:EF:78:0D:91:91:1C:5A:18"}}},"request":{"raw":"GET /dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue HTTP/1.1\r\nHost: dynamic-entry.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 733\r\nContent-Type: text/html; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:05 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: -1\r\nPragma: no-cache\r\nSet-Cookie: Dynamics365PortalAnalytics=24h2B5KhXqhls-2KvH3cyi8MwqGUWRI2TlGG2lZSewaFdQ2qWIvS_q3zDv0yTt-q1xDU0CU7x-abb7csCtAi5Aat89bSCEM1bdd26u4ZreSti-bVykqKqo31ghbVu1IH8lfgcEXAe7hmx7Zt7xY2zg2; expires=Thu, 11-Jun-2026 19:52:05 GMT; path=/; secure; HttpOnly; SameSite=Lax\nARRAffinity=0eb22d20c19edaf9580d00da8793ef25da2f8fb32f441bf713accbe41900887b;Path=/;HttpOnly;Secure;Domain=dynamic-entry.powerappsportals.com\nARRAffinitySameSite=0eb22d20c19edaf9580d00da8793ef25da2f8fb32f441bf713accbe41900887b;Path=/;HttpOnly;SameSite=None;Secure;Domain=dynamic-entry.powerappsportals.com\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 0c724699-4a26-45a8-9bc7-6e9aa86eae55\r\nx-ms-portal-app: s-7d8da913-1fa8-4cc4-987b-d0d7749ceed5-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-tJBBXShxPb+P995uzYjazhAuZ/n0snR+c8wxiAafLDc=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes'   ; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=0c724699-4a26-45a8-9bc7-6e9aa86eae55\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"58d6887d41ee4fe43760fae12b9fd60e","sha1":"9d1e0ec27d140513360b8b5b9253f3bfd62067e6","sha256":"36efe3fe9f1b11420857ac03b850aa497b26ae4fbabd2f3b728c44aebcb72fc3","sha512":"291c75f0e3bc947ab3d6ee3624746b52664807910b20a79a68973106ce0ad6e3f5980189c1001cc5d16f63deb1161da6469053c8229ee24ba1ef075818c8dbbc","ssdeep":"","tlshash":"b2219e4590b6419908e334b80b9ba204b029a06b7609d9c53edec344bf45cbf8ebbbd5","first_seen":"2026-03-13T19:52:28.281962Z","last_seen":"2026-03-13T19:52:28.281962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":358,"dns":31,"connect":156,"send":0,"wait":218,"receive":1,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"dynamic-entry.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:07.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/blocker.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 714\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:07 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: D0yJy9yfroTR+y3Eg+MXwe9UMX1CfmKHd2kndVdN8wQ=\r\nExpires: Fri, 13 Mar 2026 20:52:08 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 174217a6-6bf4-4ef1-9ef4-f056aa769900\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-eiFEsvb6XqjIYDmPsEzq7O6tEvzKUfxGP0NJEfO/tPA=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=174217a6-6bf4-4ef1-9ef4-f056aa769900\r\nContent-Disposition: inline;filename*=UTF-8''blocker.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logodix.com/logo/14638.png","fqdn":"logodix.com","domain":"logodix.com","tld":"com"},"ip":{"addr":"104.26.15.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logodix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 18:00:04 GMT","end":"Sun, 10 May 2026 18:59:48 GMT"},"fingerprint":{"sha1":"E5:51:7D:19:66:71:B4:B1:C6:28:F6:E8:25:E7:1A:2E:B1:7B:B4:E5","sha256":"0B:6F:28:37:7F:69:3A:03:AD:3E:2D:B9:63:41:2A:97:C6:40:15:2A:98:14:3F:35:B7:B5:6E:15:A2:D8:A5:56"}}},"request":{"raw":"GET /logo/14638.png HTTP/1.1\r\nHost: logodix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/blocker.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 714\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:08 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: D0yJy9yfroTR+y3Eg+MXwe9UMX1CfmKHd2kndVdN8wQ=\r\nExpires: Fri, 13 Mar 2026 20:52:09 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 26e191da-07d3-4cc3-8795-a8eb6786b26b\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-nYww//puoEaENN7M7Gofx8UMkZe6owcYPa/So8xPVUQ=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=26e191da-07d3-4cc3-8795-a8eb6786b26b\r\nContent-Disposition: inline;filename*=UTF-8''blocker.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/site.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 24344\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:08 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: cYTegyLlp6DbEicOzq2THrAXcFK1CklSHf+xcWq2HYk=\r\nExpires: Fri, 13 Mar 2026 20:52:09 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 449a2d32-7f63-4802-b991-281e05ef3281\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-596QPj5Y0PzKpgpeA6GC3/Wj1rrxF0waT0MPVRQpbWU=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=449a2d32-7f63-4802-b991-281e05ef3281\r\nContent-Disposition: inline;filename*=UTF-8''script.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57675)","md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/favicon.ico","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Length: 86\r\nDate: Fri, 13 Mar 2026 19:52:09 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: -1\r\nPragma: no-cache\r\nx-ms-request-id: 5f8df9bc-7b0d-4899-95c0-efea13ade4c5\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nServer-Timing: response-code; desc=404, correlationId; desc=5f8df9bc-7b0d-4899-95c0-efea13ade4c5\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"c9bbc9203a6ca3e2fafec6f728a820cd","sha1":"6a3c5f07d4b4f9471812879800a0c270bc73e326","sha256":"24fce7c547069682c963ad5bdddc3b597df0f6dc02b663e7f243a85f4ba23f9a","sha512":"37e5662ab05c6df7b902cb18b23b219c2e6460dfd883e0bd26da6c32869ead9a81a76804b281abb4928d757032262dd8d505d8c00e0d27e30a63677b112a3d17","ssdeep":"","tlshash":"5ca0122242dc092502491459171844762b7c440496f28111100cd0853a15874016458d","first_seen":"2023-05-06T00:38:37Z","last_seen":"2026-04-02T17:45:07.541555Z","times_seen":236,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:07.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email-internals.powerappsportals.com/\r\nOrigin: https://email-internals.powerappsportals.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Fri, 13 Mar 2026 19:52:07 GMT\r\ncontent-type: text/plain\r\ncontent-length: 109\r\nretry-after: 3591\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDR%2B44gwzv4lS3gmHmZIDtqoyRgotSSDlY8SsVte%2FPNPWEh%2B25yD4zsYZ6N6dE0GKL7fEoJQR5wwJnPJBeoWYE7j2p%2FRn5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dbd93c7582e45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c3159f773282f6ca3a22581044699ff9","sha1":"85835e662022f3f574110238bc76a0a41756759a","sha256":"172548325ccff37cd04998aefa5ffcaaa343d1f18fc5541fc7bb229994f4d92d","sha512":"12c0f48cf84315f1c6b3c2b0b2cba3825c44705ec68624e4f462e1709bf8d10fe642a99e1ac2d493bf3b2c7e759dea3ab4d6d49314f7abfe979c941faf485e65","ssdeep":"","tlshash":"5cb0124ad1d40b2002d017fd83a9f26cfaa788343aec13b89464307e1651447375dd4c","first_seen":"2026-01-07T00:37:32.012541Z","last_seen":"2026-03-13T19:52:28.279392Z","times_seen":723,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":16,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:07.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.3/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28112\r\ncf-ray: 9dbd93c99a65a106-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63a24ddb-6dd0\"\r\nlast-modified: Wed, 21 Dec 2022 00:05:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2071529\r\nexpires: Wed, 03 Mar 2027 19:52:07 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UnNm2FRaVAOKNDH2NDdlhGwIqmJwNIGJrMsEZXN%2F2jMEPwdRm7mLbRW57Lw%2BSDD5LP%2BBkVT61oBUUf%2BFXd89m2YEH57JV1yKthLy5eCmScEf5RkL8fnrhzDKWYcrZsYNE4dvtK3Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:52:08.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2494\r\nContent-Type: text/html; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:08 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: -1\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 4c685e3f-7863-4b99-8808-ac9a248a3094\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-lK6Cc+7RPs7Zn/y74jbMSAjFFn+5klxVX2bovjdI6Cg=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes'   'sha256-pwQduWxX3Cm7lLbQmAos7n73RLP4QrsCDFejmsBdZ78='; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=4c685e3f-7863-4b99-8808-ac9a248a3094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":5859,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8fa76548e46db188e493c2ddf6c1876a","sha1":"8560940c8f90150dfb3bcd6c8157eee24be90c67","sha256":"aa19983bb299ca7847e0983c99d8848a4eebaf236778b4b62c020f7a28fbf095","sha512":"7f8c7f034ecb8ec243c3e18dec5a608ee425ec7aa8e406827c2579714a939d087a8ac04f0f9e05c2dd5e6f78c19c1986ca58c672ccfc12e4192e0d40242c8bbe","ssdeep":"96:Yb/V/7nlTIG8Tkko8PlZFTXww5Q2L4rF6P7DIwu5JalN4XG:u/V/7lT9MHo8PlZFTXww5Q2LbP7DIwI0","tlshash":"5fc1435695b7045ab003c0b87ff76b092264d507c35acd5c3fac7298df8aa8a59b339c","first_seen":"2026-03-13T19:52:28.285174Z","last_seen":"2026-03-13T19:52:28.285174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.3/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28112\r\ncf-ray: 9dbd93c24e9635cc-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63a24ddb-6dd0\"\r\nlast-modified: Wed, 21 Dec 2022 00:05:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2071528\r\nexpires: Wed, 03 Mar 2027 19:52:06 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vdj5ZXa0TyGIgyZOn%2FLbMTveGn%2BWjKchrHVkX5CG0WEOQ2ujw6aGs9blFs95DK2MoqVqPVnnC%2B4CE0SsaZt4NuKYXnRY1dAPQYc51rvpZdiUGkzZzkvSY5QceuhcAcPfQu4iPGDm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":53,"dns":9,"connect":13,"send":0,"wait":25,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9dbd93d08d978be6-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 07/21/2025 22:36:56\r\ncdn-proxyver: 1.32\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 17fcc9596d692e352f93ed34c95eb4da\r\ncdn-cache: HIT\r\nage: 1877266\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-04-04T18:41:50.05316Z","times_seen":53159,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.3/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28112\r\ncf-ray: 9dbd93d08af0a106-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63a24ddb-6dd0\"\r\nlast-modified: Wed, 21 Dec 2022 00:05:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2071531\r\nexpires: Wed, 03 Mar 2027 19:52:09 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y%2B845%2FS1JEsLd2sZaSM9EngiQgeR3tmgLtvnaoUDwofy3DWpAWFR0eFjS7kls1fDlWKXHZ7Hctgc8%2B9ze%2BVBc2GLfF4Z64nKi9qVlpN01tIruLFkuOwGBj5LZRAw3XBAR%2BzOARDN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"cf2fbbf84281d9ecbffb4993203d543b","sha1":"832a6a4e86daf38b1975d705c5de5d9e5f5844bc","sha256":"a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575","sha512":"493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL","tlshash":"4c9318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-10T04:24:46Z","last_seen":"2026-04-04T18:20:29.187271Z","times_seen":23364,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.vecteezy.com/system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png","fqdn":"static.vecteezy.com","domain":"vecteezy.com","tld":"com"},"ip":{"addr":"172.64.152.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vecteezy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 01:25:47 GMT","end":"Sat, 18 Apr 2026 02:25:32 GMT"},"fingerprint":{"sha1":"67:EE:E7:D7:61:A8:C7:E6:21:2A:E0:EA:5F:31:40:A5:BE:82:2C:B7","sha256":"ED:80:9D:E7:4C:14:30:56:AE:50:43:E9:30:C7:6E:35:40:22:13:8D:AC:19:65:8C:44:B4:5F:DA:65:4E:93:A5"}}},"request":{"raw":"GET /system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png HTTP/1.1\r\nHost: static.vecteezy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 58248\r\nserver: cloudflare\r\ncf-ray: 9dbd93c23c9da41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3352\r\ncache-control: public, max-age=31536000\r\netag: \"650ab4f07524667cb5f1ad8f685621bf\"\r\nexpires: Sat, 13 Mar 2027 19:52:06 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:06:29 GMT\r\nstrict-transport-security: max-age=15552000; preload\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 f587eafd78ad297674818a70bb931fe6.cloudfront.net (CloudFront)\r\ncf-placement: remote-ATL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: vary_header_present\r\nx-action: rw\r\nx-amz-cf-id: oQcm9iBM-hWkbvs7yPiCFPqed215xD-AC2k9nKBM_ct8015_kHVuvA==\r\nx-amz-cf-pop: ATL59-P10\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VwBitUXMNahboST6RHg3a.JhuxkRxC9F\r\nx-cache: Hit from cloudfront\r\nset-cookie: __cf_bm=ezBx0xfk_E9uagMO_QoAd85Wuxl6fzO4xpkTv3fsihI-1773431526-1.0.1.1-tmgTxlwwgQ0OdvZcufwsNfVC71VwVvwCBdPBDCMR7YbXfDwddFkHme8FEfp.Bdv9siP50Z3nwUATHC6FGoCbu9tIwj95fGykDFcWHfGczqI; path=/; expires=Fri, 13-Mar-26 20:22:06 GMT; domain=.vecteezy.com; HttpOnly; Secure; SameSite=None\n_cfuvid=TAen6yMmHvSYF1MvpBP.o2F1KeIhO_Brl_lf0tl_sDw-1773431526913-0.0.1.1-604800000; path=/; domain=.vecteezy.com; HttpOnly; Secure; SameSite=None\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 700, 8-bit colormap, non-interlaced","md5":"69a9ba3051f6ee69feeb6b6ad064fe88","sha1":"50a1bc440ae9746dbe8144f316a20f37bfa44cf4","sha256":"6d7798b55c2c9f4caea6d859d003468765e18b2e3057d2ef8a14d752983dac0f","sha512":"fce734baa50322d262fc6f95fc1d48a15eb3c9c28e434891b2ce804ceae4816fa5e18991ad325c130eba80566ebb40ec698f5212d4338f144ef4860c376f3c05","ssdeep":"1536:UkmOxpISNy8xfBrYkCOBIMLlosPTfhC+0YX/3/1pPq:UkmErNy8HrYkCOBIMqsPo4XP/1pC","tlshash":"da4302b13e78c44f190475bcdeebe53a9a6003746d4f9998c9478320cf91aae6158f8d","first_seen":"2025-11-11T10:01:50.596143Z","last_seen":"2026-03-13T19:52:28.286218Z","times_seen":13,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":44,"dns":1,"connect":11,"send":0,"wait":166,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/blocker.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/blocker.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 714\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:06 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: D0yJy9yfroTR+y3Eg+MXwe9UMX1CfmKHd2kndVdN8wQ=\r\nExpires: Fri, 13 Mar 2026 20:52:06 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 3ffa0f67-bf83-434c-a749-20c4191ddef7\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-a0E8It22sMn/A3DcV+wHZvMEqkmAWJt2Ye6YD60oL6U=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=3ffa0f67-bf83-434c-a749-20c4191ddef7\r\nContent-Disposition: inline;filename*=UTF-8''blocker.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c9eb8f19ab1d02333d4ac4c468c5487a","sha1":"b75c922f5c5ee96a7520769086b07695480ddd54","sha256":"0f4c89cbdc9fae84d1fb2dc483e317c1ef54317d427e628777692775574df304","sha512":"5acf4228e173131cb57842a9226396ab1dcf829f7852362d0e29f4c2b213cbdd3e94ea2863058dd3aa63734b5f3d5448970c4c75f3549e058a215346356840cd","ssdeep":"","tlshash":"4b31be9b35f2287116bbb1bf139fa60531388903bc4a99507c5c9a0c4f54fa582f9bcb","first_seen":"2026-02-18T09:44:35.990943Z","last_seen":"2026-03-13T19:52:28.282994Z","times_seen":8,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:52:07.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/?id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:52:07.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581 HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2496\r\nContent-Type: text/html; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:07 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: -1\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: 7ed61d2b-669b-4e82-a5b4-26fad344903a\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-m4gh2uzGUQyKkLUnC33LcsHr2qFfCYeoU7vDHzHfdOc=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes'   'sha256-pwQduWxX3Cm7lLbQmAos7n73RLP4QrsCDFejmsBdZ78='; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=7ed61d2b-669b-4e82-a5b4-26fad344903a\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5859,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c065b6ddcea4e44e27825b6372649433","sha1":"f2059995e3103407a3a62dbef1e7510e5e6dd9ed","sha256":"3a7e8deae8b63b7bddb35df0e2ce23c4b295f510b9647ab9595ab0406fdd6b20","sha512":"c339156525e8ba15385361509e9b6a82bc293faa1d68dc00eab0d3e6f8c926d0613469ff387a62eecce4e61f9bbe97e22e412c9840a7c9a124d061a47f939c79","ssdeep":"96:Y/V/7nlTIG8Tkko8PlZFTXww5Q2L4rF6P7DIwu5JaXYG:OV/7lT9MHo8PlZFTXww5Q2LbP7DIwIJm","tlshash":"96c1535295b7045ab00380b87ff76b092264d507c35bcd5c3fac7298df8a98a5ab339c","first_seen":"2026-03-13T19:52:28.286884Z","last_seen":"2026-03-13T19:52:28.286884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.freepik.com/vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80","fqdn":"img.freepik.com","domain":"freepik.com","tld":"com"},"ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:08.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freepik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 02:22:50 GMT","end":"Thu, 23 Apr 2026 02:22:49 GMT"},"fingerprint":{"sha1":"C0:B4:F8:4D:39:27:04:41:5C:4B:20:FE:12:17:4C:7A:A9:B9:0C:0F","sha256":"D7:24:91:56:CA:B1:9F:78:CC:A1:96:07:EA:A0:CB:AA:73:D5:06:11:4C:6B:0C:75:21:48:D3:CD:A2:38:40:B6"}}},"request":{"raw":"GET /vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80 HTTP/1.1\r\nHost: img.freepik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"24d6798a60dbdff5dca478a91f5a5d71\"\r\nlast-modified: Sun, 01 Mar 2026 09:54:12 GMT\r\ncontent-length: 5745\r\ncache-control: no-transform, max-age=604800\r\nexpires: Fri, 20 Mar 2026 19:52:08 GMT\r\ndate: Fri, 13 Mar 2026 19:52:08 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nstrict-transport-security: max-age=63072000\r\ncontent-type: image/avif\r\nvary: Origin\r\nx-robots-tag: noimageai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4e65936ae45be8c232cb5da6c2b57832","sha1":"425cba8765a7a52754621a59debfc65a3b10ccb1","sha256":"b01b8edbe9e386f7a877ac34d1f995e697b0edbb48f907fdc37ec43b1910bf06","sha512":"79b27cef0240fa0bc50b571a78339380b6b93bc14da2f7384de89b9ad238f142c3ece5b84ebdd6eccee0249de0a457762876cabb7c7bc091330a53addc41bb67","ssdeep":"96:rGP0zcRCr3tEvppn4cI2ok2bXy0WN8tRp+WN0zzPtt86qO9FhhEPL7:rGMEcWfno2okyyHU+zP386UT7","tlshash":"f0c1af8cba88985adb841930b30b8e6a2369e154c327cc45f189ec363d5ffb0da504b4","first_seen":"2026-02-18T09:44:35.989508Z","last_seen":"2026-03-13T19:52:28.287848Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.vecteezy.com/system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png","fqdn":"static.vecteezy.com","domain":"vecteezy.com","tld":"com"},"ip":{"addr":"172.64.152.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vecteezy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 01:25:47 GMT","end":"Sat, 18 Apr 2026 02:25:32 GMT"},"fingerprint":{"sha1":"67:EE:E7:D7:61:A8:C7:E6:21:2A:E0:EA:5F:31:40:A5:BE:82:2C:B7","sha256":"ED:80:9D:E7:4C:14:30:56:AE:50:43:E9:30:C7:6E:35:40:22:13:8D:AC:19:65:8C:44:B4:5F:DA:65:4E:93:A5"}}},"request":{"raw":"GET /system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png HTTP/1.1\r\nHost: static.vecteezy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nCookie: __cf_bm=ezBx0xfk_E9uagMO_QoAd85Wuxl6fzO4xpkTv3fsihI-1773431526-1.0.1.1-tmgTxlwwgQ0OdvZcufwsNfVC71VwVvwCBdPBDCMR7YbXfDwddFkHme8FEfp.Bdv9siP50Z3nwUATHC6FGoCbu9tIwj95fGykDFcWHfGczqI; _cfuvid=TAen6yMmHvSYF1MvpBP.o2F1KeIhO_Brl_lf0tl_sDw-1773431526913-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 58248\r\nserver: cloudflare\r\ncf-ray: 9dbd93d0eafc2efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3355\r\ncache-control: public, max-age=31536000\r\netag: \"650ab4f07524667cb5f1ad8f685621bf\"\r\nexpires: Sat, 13 Mar 2027 19:52:09 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:06:29 GMT\r\nstrict-transport-security: max-age=15552000; preload\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 f587eafd78ad297674818a70bb931fe6.cloudfront.net (CloudFront)\r\ncf-placement: remote-ATL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: vary_header_present\r\nx-action: rw\r\nx-amz-cf-id: oQcm9iBM-hWkbvs7yPiCFPqed215xD-AC2k9nKBM_ct8015_kHVuvA==\r\nx-amz-cf-pop: ATL59-P10\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VwBitUXMNahboST6RHg3a.JhuxkRxC9F\r\nx-cache: Hit from cloudfront\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 700, 8-bit colormap, non-interlaced","md5":"69a9ba3051f6ee69feeb6b6ad064fe88","sha1":"50a1bc440ae9746dbe8144f316a20f37bfa44cf4","sha256":"6d7798b55c2c9f4caea6d859d003468765e18b2e3057d2ef8a14d752983dac0f","sha512":"fce734baa50322d262fc6f95fc1d48a15eb3c9c28e434891b2ce804ceae4816fa5e18991ad325c130eba80566ebb40ec698f5212d4338f144ef4860c376f3c05","ssdeep":"1536:UkmOxpISNy8xfBrYkCOBIMLlosPTfhC+0YX/3/1pPq:UkmErNy8HrYkCOBIMqsPo4XP/1pC","tlshash":"da4302b13e78c44f190475bcdeebe53a9a6003746d4f9998c9478320cf91aae6158f8d","first_seen":"2025-11-11T10:01:50.596143Z","last_seen":"2026-03-13T19:52:28.286218Z","times_seen":13,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63f5de8e8260819e3bbf4432/6696612bee125efffba462a3_How%20to%20Create%20a%20.Biz%20Email%20Address%20in%202%20Quick%20and%20Easy%20Ways.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 00:51:58 GMT","end":"Thu, 07 May 2026 01:51:37 GMT"},"fingerprint":{"sha1":"57:A1:73:C0:08:07:F2:DD:56:2A:DD:FF:51:D4:A5:62:53:C7:9A:8E","sha256":"E9:8A:00:BD:F9:8C:57:70:7F:31:ED:E2:BE:3D:E8:0B:D1:09:B4:07:B7:19:9F:0A:04:46:22:1B:EA:3D:8D:24"}}},"request":{"raw":"GET /63f5de8e8260819e3bbf4432/6696612bee125efffba462a3_How%20to%20Create%20a%20.Biz%20Email%20Address%20in%202%20Quick%20and%20Easy%20Ways.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 73484\r\ncf-ray: 9dbd93d2de6a1a30-OSL\r\nx-amz-id-2: x75Y6ETuEikvSvd8s/vMqDqBZGgaOA4jp4f+z5k6e8tHjRi+Uon+k9whjeqhMLeaX0VVxHZPOUs=\r\nx-amz-request-id: ECKYC7RE2BWHSBJJ\r\nlast-modified: Tue, 16 Jul 2024 12:01:49 GMT\r\netag: \"a6fe6f4be11204fd4c3d5ffe166ac28a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: eXFNGYfEoGasRz.cViG391_Gbvr8xQeQ\r\naccept-ranges: bytes\r\nage: 2206905\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":73484,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1354 x 904, 8-bit/color RGBA, non-interlaced","md5":"a6fe6f4be11204fd4c3d5ffe166ac28a","sha1":"9fa7fc3dc3dcdc3ed3c1f7391287ca92b33f3618","sha256":"eed0c26ce879f76e0fc64eda5b02a0e54cc5917b2cda7412202d0e60a14e3200","sha512":"3d06012df2bf7ad098c99643974617c3d72716b4ac9d724fdca46c934aeffb8cda85d2d80e32834d5925d11e9985c8fdd4af07da76ccd2bab1a78a5b9e977b52","ssdeep":"1536:3jBfVFlV1X+dkeGWFcC51qe+VzdWbbFV1wBbPUHL2Dxg6p+Jm:3jB9Ff1XokeG0c4mVzwbFYPUuxaJm","tlshash":"5373e1bcbac21f3cccae217189b27ef9b6e41281a04b7b5b423d15f7409f8994295057","first_seen":"2026-02-18T09:44:35.98382Z","last_seen":"2026-03-13T19:52:28.288395Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-entry.powerappsportals.com/favicon.ico","fqdn":"dynamic-entry.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynamic-entry.powerappsportals.com/dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue","date":"2026-03-13T19:52:06.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 19 Feb 2026 11:46:34 GMT","end":"Tue, 18 Aug 2026 11:46:34 GMT"},"fingerprint":{"sha1":"B0:D7:EB:78:47:DD:03:5B:40:FB:70:FD:8A:7A:07:57:2C:4E:E4:DD","sha256":"31:C6:B9:7C:2D:19:06:E4:7A:6A:1D:88:E7:58:51:C8:7C:6E:B0:A6:4F:EF:89:DC:EF:78:0D:91:91:1C:5A:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dynamic-entry.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynamic-entry.powerappsportals.com/dynamics/?error=login_required\u0026error_description=AADSTS50058%3A%2BA%2Bsilent%2Bsign-in%2Brequest%2Bwas%2Bsent%2Bbut%2Bno%2Buser%2Bis%2Bsigned%2Bin.%2BThe%2Bcookies%2Bused%2Bto%2Brepresent%2Bthe%2Buser%27s%2Bsession%2Bwere%2Bnot%2Bsent%2Bin%2Bthe%2Brequest%2Bto%2BAzure%2BAD.%2BThis%2Bcan%2Bhappen%2Bif%2Bthe%2Buser%2Bis%2Busing%2BInternet%2BExplorer%2Bor%2BEdge%2C%2Band%2Bthe%2Bweb%2Bapp%2Bsending%2Bthe%2Bsilent%2Bsign-in%2Brequest%2Bis%2Bin%2Bdifferent%2BIE%2Bsecurity%2Bzone%2Bthan%2Bthe%2BAzure%2BAD%2Bendpoint%2B%28login.microsoftonline.com%29.%2BTrace%2BID%3A%2B91983bde-f738-4d14-b2c9-d03fffae6100%2BCorrelation%2BID%3A%2Be13904c4-ca5b-4610-9ed9-5b94c0edd54b%2BTimestamp%3A%2B2026-02-16%2B17%3A27%3A06Z\u0026error_uri=https%3A%2F%2Flogin.microsoftonline.com%2Ferror%3Fcode%3D50058\u0026state=dk-contact%40team.blue\r\nCookie: Dynamics365PortalAnalytics=24h2B5KhXqhls-2KvH3cyi8MwqGUWRI2TlGG2lZSewaFdQ2qWIvS_q3zDv0yTt-q1xDU0CU7x-abb7csCtAi5Aat89bSCEM1bdd26u4ZreSti-bVykqKqo31ghbVu1IH8lfgcEXAe7hmx7Zt7xY2zg2; ARRAffinity=0eb22d20c19edaf9580d00da8793ef25da2f8fb32f441bf713accbe41900887b; ARRAffinitySameSite=0eb22d20c19edaf9580d00da8793ef25da2f8fb32f441bf713accbe41900887b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Length: 86\r\nDate: Fri, 13 Mar 2026 19:52:05 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: -1\r\nPragma: no-cache\r\nx-ms-request-id: e02de6aa-5ae3-4112-97db-d6a36a788a99\r\nx-ms-portal-app: s-7d8da913-1fa8-4cc4-987b-d0d7749ceed5-USw\r\nServer-Timing: response-code; desc=404, correlationId; desc=e02de6aa-5ae3-4112-97db-d6a36a788a99\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"c9bbc9203a6ca3e2fafec6f728a820cd","sha1":"6a3c5f07d4b4f9471812879800a0c270bc73e326","sha256":"24fce7c547069682c963ad5bdddc3b597df0f6dc02b663e7f243a85f4ba23f9a","sha512":"37e5662ab05c6df7b902cb18b23b219c2e6460dfd883e0bd26da6c32869ead9a81a76804b281abb4928d757032262dd8d505d8c00e0d27e30a63677b112a3d17","ssdeep":"","tlshash":"5ca0122242dc092502491459171844762b7c440496f28111100cd0853a15874016458d","first_seen":"2023-05-06T00:38:37Z","last_seen":"2026-04-02T17:45:07.541555Z","times_seen":236,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"dynamic-entry.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.freepik.com/vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80","fqdn":"img.freepik.com","domain":"freepik.com","tld":"com"},"ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freepik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 02:22:50 GMT","end":"Thu, 23 Apr 2026 02:22:49 GMT"},"fingerprint":{"sha1":"C0:B4:F8:4D:39:27:04:41:5C:4B:20:FE:12:17:4C:7A:A9:B9:0C:0F","sha256":"D7:24:91:56:CA:B1:9F:78:CC:A1:96:07:EA:A0:CB:AA:73:D5:06:11:4C:6B:0C:75:21:48:D3:CD:A2:38:40:B6"}}},"request":{"raw":"GET /vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80 HTTP/1.1\r\nHost: img.freepik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"24d6798a60dbdff5dca478a91f5a5d71\"\r\nlast-modified: Sun, 01 Mar 2026 09:54:12 GMT\r\ncontent-length: 5745\r\ncache-control: no-transform, max-age=604800\r\nexpires: Fri, 20 Mar 2026 19:52:06 GMT\r\ndate: Fri, 13 Mar 2026 19:52:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nstrict-transport-security: max-age=63072000\r\ncontent-type: image/avif\r\nvary: Origin\r\nx-robots-tag: noimageai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4e65936ae45be8c232cb5da6c2b57832","sha1":"425cba8765a7a52754621a59debfc65a3b10ccb1","sha256":"b01b8edbe9e386f7a877ac34d1f995e697b0edbb48f907fdc37ec43b1910bf06","sha512":"79b27cef0240fa0bc50b571a78339380b6b93bc14da2f7384de89b9ad238f142c3ece5b84ebdd6eccee0249de0a457762876cabb7c7bc091330a53addc41bb67","ssdeep":"96:rGP0zcRCr3tEvppn4cI2ok2bXy0WN8tRp+WN0zzPtt86qO9FhhEPL7:rGMEcWfno2okyyHU+zP386UT7","tlshash":"f0c1af8cba88985adb841930b30b8e6a2369e154c327cc45f189ec363d5ffb0da504b4","first_seen":"2026-02-18T09:44:35.989508Z","last_seen":"2026-03-13T19:52:28.287848Z","times_seen":8,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":43,"dns":1,"connect":7,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"email-internals.powerappsportals.com/mail-login/site.js","fqdn":"email-internals.powerappsportals.com","domain":"powerappsportals.com","tld":"com"},"ip":{"addr":"40.112.243.107","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue","date":"2026-03-13T19:52:06.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.powerappsportals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 20 Feb 2026 17:42:53 GMT","end":"Wed, 19 Aug 2026 17:42:53 GMT"},"fingerprint":{"sha1":"80:24:74:DC:34:25:94:51:2E:06:57:B6:13:DA:E8:E6:44:84:7D:24","sha256":"F9:3A:C5:5A:EF:93:5B:DB:F2:52:80:B4:A7:7F:43:A9:52:CD:AC:26:59:2D:E5:A7:34:18:13:80:38:E7:63:B1"}}},"request":{"raw":"GET /mail-login/site.js HTTP/1.1\r\nHost: email-internals.powerappsportals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/mail-login/?state=dk-contact@team.blue\r\nCookie: Dynamics365PortalAnalytics=eTDMF16n4oMeDw0NCb4ZKNT3Q4UmMEAIEK5sYxBnsl5mbou3_IqyymCSBpU0fQ0c09fnvts8R8RnGGlmG7aCPHY03N7p2mn4U_CSc9le0Unkr9f7Oh6iI0NEZo-R3uG23iRgxHHDd__A0p5JLFMUWg2; ARRAffinity=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4; ARRAffinitySameSite=c6cae32bd8d6710fe01c54baa79dd5dc23d3d1dd85ee352d7ce8623f385eaef4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 24344\r\nContent-Type: application/javascript; charset=utf-8\r\nDate: Fri, 13 Mar 2026 19:52:07 GMT\r\nCache-Control: public, max-age=3600\r\nContent-Encoding: gzip\r\nETag: cYTegyLlp6DbEicOzq2THrAXcFK1CklSHf+xcWq2HYk=\r\nExpires: Fri, 13 Mar 2026 20:52:07 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nx-ms-request-id: b2550be9-9ce5-4196-b978-9da208c45af8\r\nx-ms-portal-app: s-203e9373-bccb-498a-9728-34ffbde777d6-USw\r\nContent-Security-Policy: script-src 'self' test.content.powerapps.com content.powerapps.com content.powerapps.us content.appsplatform.us content.powerapps.cn  'unsafe-eval' 'nonce-PI7Gof+nmocpbHug1gNfaRvRHo5MrtOffk92YHBjVe0=' 'sha256-YpBM7xPJQJfSSthwTVGpeXpUbzvd1XmAqvdlDUvm/QM=' 'unsafe-hashes' 'inject-hashes'; style-src 'unsafe-inline' https:;\r\nX-Frame-Options: SAMEORIGIN\r\nServer-Timing: response-code; desc=200, correlationId; desc=b2550be9-9ce5-4196-b978-9da208c45af8\r\nContent-Disposition: inline;filename*=UTF-8''script.js\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57675)","md5":"b635006b5a03333b3bba9b17e1b4142e","sha1":"738f9c78ddae67aefce3425350583de59da9900d","sha256":"7184de8322e5a7a0db12270ecead931eb0177052b50a49521dffb1716ab61d89","sha512":"957ca059d4775e605dad885e1e7a7a0726c25b6ea2421925274e0225556516d6a0591932283f9e76e98a4eddc8b397b32fdac09fbff3ae6d41eb3c45e907666b","ssdeep":"1536:CQ1fAM7+gGAO9DWQgZd1hCvmlqCWjirS7EGyO:Cd9AcCWmrxO","tlshash":"e343e8e0bbc798a34c22f29fb14dfbe385351b52cc5b589a21d3f2ce93647255a6108d","first_seen":"2026-02-18T09:44:35.992025Z","last_seen":"2026-03-13T19:52:28.280701Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1114,"timings":{"blocked":340,"dns":1,"connect":167,"send":0,"wait":261,"receive":167,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"email-internals.powerappsportals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:07.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9dbd93c98a1a8be6-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 07/21/2025 22:36:56\r\ncdn-proxyver: 1.32\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 17fcc9596d692e352f93ed34c95eb4da\r\ncdn-cache: HIT\r\nage: 1877265\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-04-04T18:41:50.05316Z","times_seen":53159,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.freepik.com/vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80","fqdn":"img.freepik.com","domain":"freepik.com","tld":"com"},"ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freepik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 02:22:50 GMT","end":"Thu, 23 Apr 2026 02:22:49 GMT"},"fingerprint":{"sha1":"C0:B4:F8:4D:39:27:04:41:5C:4B:20:FE:12:17:4C:7A:A9:B9:0C:0F","sha256":"D7:24:91:56:CA:B1:9F:78:CC:A1:96:07:EA:A0:CB:AA:73:D5:06:11:4C:6B:0C:75:21:48:D3:CD:A2:38:40:B6"}}},"request":{"raw":"GET /vecteurs-premium/icone-abonnement-au-message-courrier-electronique_1178600-1831.jpg?semt=ais_hybrid\u0026w=740\u0026q=80 HTTP/1.1\r\nHost: img.freepik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"24d6798a60dbdff5dca478a91f5a5d71\"\r\nlast-modified: Sun, 01 Mar 2026 09:54:12 GMT\r\ncontent-length: 5745\r\ncache-control: no-transform, max-age=604800\r\nexpires: Fri, 20 Mar 2026 19:52:09 GMT\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nstrict-transport-security: max-age=63072000\r\ncontent-type: image/avif\r\nvary: Origin\r\nx-robots-tag: noimageai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4e65936ae45be8c232cb5da6c2b57832","sha1":"425cba8765a7a52754621a59debfc65a3b10ccb1","sha256":"b01b8edbe9e386f7a877ac34d1f995e697b0edbb48f907fdc37ec43b1910bf06","sha512":"79b27cef0240fa0bc50b571a78339380b6b93bc14da2f7384de89b9ad238f142c3ece5b84ebdd6eccee0249de0a457762876cabb7c7bc091330a53addc41bb67","ssdeep":"96:rGP0zcRCr3tEvppn4cI2ok2bXy0WN8tRp+WN0zzPtt86qO9FhhEPL7:rGMEcWfno2okyyHU+zP386UT7","tlshash":"f0c1af8cba88985adb841930b30b8e6a2369e154c327cc45f189ec363d5ffb0da504b4","first_seen":"2026-02-18T09:44:35.989508Z","last_seen":"2026-03-13T19:52:28.287848Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email-internals.powerappsportals.com/\r\nOrigin: https://email-internals.powerappsportals.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: text/plain\r\ncontent-length: 109\r\nretry-after: 3589\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZAc49qETZB01ytXZorzQXPWuKg1%2FVOCUW6qJDCRZejkS1TNVo7kXAXPGo4HtbVhmyXaSyYpArtaA8Ltdve7SYpnh%2FVHTkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dbd93d2dcbb45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c3159f773282f6ca3a22581044699ff9","sha1":"85835e662022f3f574110238bc76a0a41756759a","sha256":"172548325ccff37cd04998aefa5ffcaaa343d1f18fc5541fc7bb229994f4d92d","sha512":"12c0f48cf84315f1c6b3c2b0b2cba3825c44705ec68624e4f462e1709bf8d10fe642a99e1ac2d493bf3b2c7e759dea3ab4d6d49314f7abfe979c941faf485e65","ssdeep":"","tlshash":"5cb0124ad1d40b2002d017fd83a9f26cfaa788343aec13b89464307e1651447375dd4c","first_seen":"2026-01-07T00:37:32.012541Z","last_seen":"2026-03-13T19:52:28.279392Z","times_seen":723,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email-internals.powerappsportals.com/\r\nOrigin: https://email-internals.powerappsportals.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: text/plain\r\ncontent-length: 109\r\nretry-after: 3589\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIMjLuoH64ek6YdAA7tkxKd5besQ%2BXYif3LL1dx1HASB9H%2B%2Favi2GMxql3HK3cFQu9tvMa3EtDuyP3WwpkhMuBJ9DrVOg2w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dbd93d2ecfd45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c3159f773282f6ca3a22581044699ff9","sha1":"85835e662022f3f574110238bc76a0a41756759a","sha256":"172548325ccff37cd04998aefa5ffcaaa343d1f18fc5541fc7bb229994f4d92d","sha512":"12c0f48cf84315f1c6b3c2b0b2cba3825c44705ec68624e4f462e1709bf8d10fe642a99e1ac2d493bf3b2c7e759dea3ab4d6d49314f7abfe979c941faf485e65","ssdeep":"","tlshash":"5cb0124ad1d40b2002d017fd83a9f26cfaa788343aec13b89464307e1651447375dd4c","first_seen":"2026-01-07T00:37:32.012541Z","last_seen":"2026-03-13T19:52:28.279392Z","times_seen":723,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.vecteezy.com/system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png","fqdn":"static.vecteezy.com","domain":"vecteezy.com","tld":"com"},"ip":{"addr":"172.64.152.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://email-internals.powerappsportals.com/mail-login/?state=dk-contact%40team.blue\u0026err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=c234B824ca0697Caa3A3a9A916a581","date":"2026-03-13T19:52:08.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vecteezy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 01:25:47 GMT","end":"Sat, 18 Apr 2026 02:25:32 GMT"},"fingerprint":{"sha1":"67:EE:E7:D7:61:A8:C7:E6:21:2A:E0:EA:5F:31:40:A5:BE:82:2C:B7","sha256":"ED:80:9D:E7:4C:14:30:56:AE:50:43:E9:30:C7:6E:35:40:22:13:8D:AC:19:65:8C:44:B4:5F:DA:65:4E:93:A5"}}},"request":{"raw":"GET /system/resources/thumbnails/023/495/208/small_2x/global-logo-for-business-png.png HTTP/1.1\r\nHost: static.vecteezy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://email-internals.powerappsportals.com/\r\nCookie: __cf_bm=ezBx0xfk_E9uagMO_QoAd85Wuxl6fzO4xpkTv3fsihI-1773431526-1.0.1.1-tmgTxlwwgQ0OdvZcufwsNfVC71VwVvwCBdPBDCMR7YbXfDwddFkHme8FEfp.Bdv9siP50Z3nwUATHC6FGoCbu9tIwj95fGykDFcWHfGczqI; _cfuvid=TAen6yMmHvSYF1MvpBP.o2F1KeIhO_Brl_lf0tl_sDw-1773431526913-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:52:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 58248\r\nserver: cloudflare\r\ncf-ray: 9dbd93ca19812efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3354\r\ncache-control: public, max-age=31536000\r\netag: \"650ab4f07524667cb5f1ad8f685621bf\"\r\nexpires: Sat, 13 Mar 2027 19:52:08 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:06:29 GMT\r\nstrict-transport-security: max-age=15552000; preload\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 f587eafd78ad297674818a70bb931fe6.cloudfront.net (CloudFront)\r\ncf-placement: remote-ATL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: vary_header_present\r\nx-action: rw\r\nx-amz-cf-id: oQcm9iBM-hWkbvs7yPiCFPqed215xD-AC2k9nKBM_ct8015_kHVuvA==\r\nx-amz-cf-pop: ATL59-P10\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VwBitUXMNahboST6RHg3a.JhuxkRxC9F\r\nx-cache: Hit from cloudfront\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 700, 8-bit colormap, non-interlaced","md5":"69a9ba3051f6ee69feeb6b6ad064fe88","sha1":"50a1bc440ae9746dbe8144f316a20f37bfa44cf4","sha256":"6d7798b55c2c9f4caea6d859d003468765e18b2e3057d2ef8a14d752983dac0f","sha512":"fce734baa50322d262fc6f95fc1d48a15eb3c9c28e434891b2ce804ceae4816fa5e18991ad325c130eba80566ebb40ec698f5212d4338f144ef4860c376f3c05","ssdeep":"1536:UkmOxpISNy8xfBrYkCOBIMLlosPTfhC+0YX/3/1pPq:UkmErNy8HrYkCOBIMqsPo4XP/1pC","tlshash":"da4302b13e78c44f190475bcdeebe53a9a6003746d4f9998c9478320cf91aae6158f8d","first_seen":"2025-11-11T10:01:50.596143Z","last_seen":"2026-03-13T19:52:28.286218Z","times_seen":13,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://email-internals.powerappsportals.com/mail-login/?err=T9XdJaNaJ5IgZzlugmv92b7eSgSeNT58AeqzjSDiBceXubDyR9zEBLUepISwv15IzrNCwNlLY2iruB0i54KzhPDUlNYUQPkLz1msftITuuBRCZd90VKTwVbRxNX\u0026dispatch=C1c39589986A237bb0A7C184533563C85\u0026id=ZGstY29udGFjdEB0ZWFtLmJsdWU%3D","date":"2026-03-13T19:52:09.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://email-internals.powerappsportals.com/\r\nOrigin: https://email-internals.powerappsportals.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Fri, 13 Mar 2026 19:52:09 GMT\r\ncontent-type: text/plain\r\ncontent-length: 109\r\nretry-after: 3589\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yv3Tpuio9MLGYZ58n12%2B4IGVLclVS8Mr7jX9M7%2F9Y0naxfF9KUjxCzFuAxCVnxWlqY6Xn1%2BTXVspgE841wDD8sKky7fCxTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dbd93d2ac4b45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c3159f773282f6ca3a22581044699ff9","sha1":"85835e662022f3f574110238bc76a0a41756759a","sha256":"172548325ccff37cd04998aefa5ffcaaa343d1f18fc5541fc7bb229994f4d92d","sha512":"12c0f48cf84315f1c6b3c2b0b2cba3825c44705ec68624e4f462e1709bf8d10fe642a99e1ac2d493bf3b2c7e759dea3ab4d6d49314f7abfe979c941faf485e65","ssdeep":"","tlshash":"5cb0124ad1d40b2002d017fd83a9f26cfaa788343aec13b89464307e1651447375dd4c","first_seen":"2026-01-07T00:37:32.012541Z","last_seen":"2026-03-13T19:52:28.279392Z","times_seen":723,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
