{"report_id":"811548bb-b27a-4b7b-b242-82da7754b018","version":6,"status":"done","tags":["microsoft","phishing","suspicious","telegram_bot"],"date":"2025-10-29T13:20:40Z","url":{"schema":"http","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"title":"Sign in to your Microsoft account","dom":{"size":21821,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"62ccd7d553a96ef6f38995a35ba7097d","sha1":"08eb15a61bf3077cb0d87a32ad8d1829e71305d8","sha256":"20dd97ad592b942a32f9e23d4e477159a2fa4b943f17bab7f52747271d7ee6b6","sha512":"cf333c1c64c246e5b3aa4e49809c66073fb90257368c1af02fd9ba28b0034177e019a3617c44ceee796125335ac91667c4ab2d07e39dcd2b10d031a0112db35c","ssdeep":"192:6zEQvgy9F/aA0+VULCN+64BGUAQUSlZw/ZfqJ9GrYW0MT+1HjDzQFliy0tmO7/Iu:hJXPw/6miHD5bPLT3K8vTXr9","tlshash":"6da2845a11f305516aa3b1b977ef57063561c403984bcd183eac874c8f52ec6eeb67c8","dom_hash":"domhash7ee1b80c26be65ace80cb653ae713cf4","first_seen":"2025-10-29T12:36:10.118963Z","last_seen":"2025-10-29T13:20:42.243889Z","times_seen":3,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-03T13:20:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":4,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-29","alert":"Detects file containing Telegram Bot API","trigger":"microsoftssidd.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-29","alert":"Detects file containing Telegram Bot API","trigger":"microsoftssidd.vercel.app/favicon.ico","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-29","alert":"Phishing Block","trigger":"microsoftssidd.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"summary":[{"fqdn":"microsoftssidd.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-29T12:36:06.95518Z","last_seen":"2025-10-29T12:36:06.95518Z","alert_count":13,"request_count":2,"received_data":46036,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-26T22:15:38.172198Z","alert_count":0,"request_count":1,"received_data":882750,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"a09e2dc4563ef46c1aa8dc08eb757d3a","sha1":"ff7f41dc4ee416cb2f958f2c11f8305e87ef30c0","sha256":"9a8ee4ea3dad062fe02646c258960f3d1d6f121eeea5d36758e4ac994dbf7a37","sha512":"8199c5a1cf6ea8b7da9923011944fe1000cb8568dfe9163b4d596e970bcfaeb528204493d39398b94c79bfc0139e7fafc6b107929638dc467af81816b16ff0f6","size":8466,"token":"7853384335:AAFJ-nBLCGbCdGAec0rxz4Si1FtFgxtXv0I","is_revoked":false,"bot":{"token":"7853384335:AAFJ-nBLCGbCdGAec0rxz4Si1FtFgxtXv0I","user_id":"7853384335","username":"No_Sign_Of_Weakness_Bot","first_name":"NoSignOfWeakness","last_name":"","chat":{"chat_id":"5816277515","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed6d0e92a91d106439d0df723d35c7d6","sha1":"f6d6bd7a6c55ae9e2e1c6d70b0a2abfb3b0cc535","sha256":"84894b439ca7c7d51f89a759c91eba08a09b390719f65fc67944eef64aef73c9","sha512":"919bc99386eb0254f204bc19bbea5e1134e297c5e564441923716783acb75f5f66dd89166169a1e86138b3532df973df4f37b464013d034fc04010faa98042ac","ssdeep":"","tlshash":"d8215b0d48de1345af17307ca36e8a277de18c07484adc09b84f9115afc2da5e2ed3d8","size":1391,"data":"","first_seen":"2025-10-29T12:36:10.12623Z","last_seen":"2025-10-29T13:20:42.246845Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a09e2dc4563ef46c1aa8dc08eb757d3a","sha1":"ff7f41dc4ee416cb2f958f2c11f8305e87ef30c0","sha256":"9a8ee4ea3dad062fe02646c258960f3d1d6f121eeea5d36758e4ac994dbf7a37","sha512":"8199c5a1cf6ea8b7da9923011944fe1000cb8568dfe9163b4d596e970bcfaeb528204493d39398b94c79bfc0139e7fafc6b107929638dc467af81816b16ff0f6","ssdeep":"192:cDzQFliy0tmO7/Iw6UpCenTmOZKDMhZvTXrVQAh08MsVlS:25bPLT3K8vTXri","tlshash":"91024f6e21a715a11af3b4bab3ef5341346184072c86c8147d6cc70e0f12ea7baf67d9","size":8466,"data":"","first_seen":"2025-10-29T12:36:10.129724Z","last_seen":"2025-10-29T13:20:42.247721Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-29","alert":"Detects file containing Telegram Bot API","trigger":"microsoftssidd.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1fbd41e1f8c8f84d7070bff2ee477fa","sha1":"cc4c1760760d48ff87274dea299c3a90b356ae4e","sha256":"8f594b8d0706ebdbe6b0a87c697a319b23e6eb2f07f85ea322591335d4f3e251","sha512":"47e2f74e5c6ce4c74601ebaad4e6cac68cb3c8013661ea89c6b9ddad2644584b706cc272211a214eeb4d6d0af0b9c9f5a1d5fb01ce709f83de6f27476481d782","ssdeep":"12288:nqxuiehVjOWjk4TgpontaGx6lPOf6kEUnh1:ntipWjR8potYlmf6Unh1","tlshash":"a1156dab368a306e43e169fb50af2c0328347da2e44dac50d241e2515db6ece45ffe95","size":881165,"data":"","first_seen":"2023-04-16T13:02:16Z","last_seen":"2026-08-03T15:16:35.536457Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-29T13:20:17.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoftssidd.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 32896\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 29 Oct 2025 13:20:18 GMT\r\netag: \"9545c178ebc2c2a7b275a8efdd321aae\"\r\nlast-modified: Wed, 29 Oct 2025 04:12:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t52vp-1761744018021-8eb9e814ba4f\r\ncontent-length: 5267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22440,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9545c178ebc2c2a7b275a8efdd321aae","sha1":"eafc4016799ee5b8228655ccd1b2cdeaa1499e24","sha256":"a5514412a17d20db7c593d776e320ace7594d02d2903617b32caf82da61c80bc","sha512":"f3437db91e7e0a814cec94293c5198f058dae999032bdc8f532f95eb3dc8e7721463d3db52c605bd8646a1f7292d5bd0ade48b16e5e21abd8ddd9f040a64bcb5","ssdeep":"192:vyJLXdbPG4gDg8HImYd5rQcwY+BfNwg8+UIT+oyMnkWhk8z30BgSC3IfJBDMhtdL:PW+tsebIgtIRBMd7ulvM","tlshash":"45a282195141055256b3e3b5fbb7570aff5280234a4282187eec934e5f72d85eaa3fcc","first_seen":"2025-10-29T12:36:10.121963Z","last_seen":"2025-10-29T13:20:42.245078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":10,"receive":26,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-29","alert":"Detects file containing Telegram Bot API","trigger":"microsoftssidd.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-29","alert":"Phishing Block","trigger":"microsoftssidd.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftssidd.vercel.app/","date":"2025-10-29T13:20:18.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/xlsx/0.18.5/xlsx.full.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftssidd.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Oct 2025 13:20:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 200988\r\ncf-ray: 9962f831ffda0afe-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"623ca451-3111c\"\r\nlast-modified: Thu, 24 Mar 2022 17:03:13 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 459426\r\nexpires: Mon, 19 Oct 2026 13:20:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uM8ErBOUNXo00d6Ylgr9TPxEByn%2BU5zXNTgFjg4iQl%2BZT2OHiYx2DOi7FSKW0SwWeqAj2H2q0PEvLHlgWKLk02a3YUod5qUJFXq%2B8rXB3OFyuVX%2BJcd0i7Rookntdcq1V8%2FRnhNe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"731d0c76e18a01f4573b6785ef17907a","sha1":"c33bcb6df64dfcc905f00d06673689b23b0a4f27","sha256":"1ecfe1970104edc775c5600381c103fd1b86ea368b6c2a38e8b7ffce52f88ee9","sha512":"a7c3ae40ad41330cd657065ef0d8c41df85403060f36b24dc38a7754ec0c8a31919af521c27a28fbc4636387f9b12b6adc737a3fe97e9fcf8a8b9796acfde1f1","ssdeep":"12288:nqxuien2Gyig0+Sranwxv0on8V34xmKe9GaJHlPOf6kEUnh1:ntiKsFSRuoiDVlmf6Unh1","tlshash":"bf35a35b2296e3adc3f06af7345e1cce6934fa9594cdab10f702f3d02d7599c04aa990","first_seen":"2025-04-23T21:45:58.486489Z","last_seen":"2026-06-07T05:47:23.500686Z","times_seen":232,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":15,"receive":10,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftssidd.vercel.app/favicon.ico","fqdn":"microsoftssidd.vercel.app","domain":"microsoftssidd.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftssidd.vercel.app/","date":"2025-10-29T13:20:18.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: microsoftssidd.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftssidd.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 32896\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 29 Oct 2025 13:20:18 GMT\r\netag: \"9545c178ebc2c2a7b275a8efdd321aae\"\r\nlast-modified: Wed, 29 Oct 2025 04:12:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::655r8-1761744018549-703399af8388\r\ncontent-length: 5267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22440,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9545c178ebc2c2a7b275a8efdd321aae","sha1":"eafc4016799ee5b8228655ccd1b2cdeaa1499e24","sha256":"a5514412a17d20db7c593d776e320ace7594d02d2903617b32caf82da61c80bc","sha512":"f3437db91e7e0a814cec94293c5198f058dae999032bdc8f532f95eb3dc8e7721463d3db52c605bd8646a1f7292d5bd0ade48b16e5e21abd8ddd9f040a64bcb5","ssdeep":"192:vyJLXdbPG4gDg8HImYd5rQcwY+BfNwg8+UIT+oyMnkWhk8z30BgSC3IfJBDMhtdL:PW+tsebIgtIRBMd7ulvM","tlshash":"45a282195141055256b3e3b5fbb7570aff5280234a4282187eec934e5f72d85eaa3fcc","first_seen":"2025-10-29T12:36:10.121963Z","last_seen":"2025-10-29T13:20:42.245078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-29","alert":"Detects file containing Telegram Bot API","trigger":"microsoftssidd.vercel.app/favicon.ico","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-29","alert":"Phishing Block","trigger":"microsoftssidd.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"microsoftssidd.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]}}]}