{"report_id":"b86eaea2-d3ac-4288-a282-07edd6574ab5","version":0,"status":"done","tags":[],"date":"2026-08-10T02:01:42Z","url":{"schema":"http","addr":"microsoft-teams-co.in/","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"ip":{"addr":"121.127.246.69","port":0,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"microsoft-teams-co.in/","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"title":"Microsoft Teams डाउनलोड करें | मुफ़्त टीम सहयोग और वीडियो कॉन्फ्रेंसिंग ऐप","dom":{"size":23468,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (502)","md5":"a22074fca5fc2ba8b063b9ec0e2a3c34","sha1":"0534801b34c9e7c03178ae63cc13d1998cd85a00","sha256":"58b0d7ae4139d0449fd3a1a91ba2d72309371739753d57ba3fbba0569ea7c5ec","sha512":"ee300a2ffa2d021b2285aff923d29d9fef0a2277764334b33cd0bf8375b5017f4d84caa123ba99116918e4afc9bc8b657c13eb524482ac86593a9d3100a98a88","ssdeep":"384:vjcD/LvKoO+d2GtGZVLUBPY5UeC8j66VDZVxXfQyYClL3JN9TDl+Wu:Q7TKoOkTBPZF8j6S9Zl+Wu","tlshash":"96b29419a3b0b23964def4e277951a3fa62095b3db5a4214749c7284cfc3df7d823289","dom_hash":"domhash05572ca23e08dff220ba9d207a930284","first_seen":"2026-08-10T01:55:40.070851Z","last_seen":"2026-08-10T02:01:43.424315Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"microsoft-teams-co.in/","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"ip":{"addr":"121.127.246.69","port":0,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T02:01:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"microsoft-teams-co.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"microsoft-teams-co.in","ip":{"addr":"121.127.246.69","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-10T01:55:34.546758Z","last_seen":"2026-08-10T01:55:34.546758Z","alert_count":2,"request_count":2,"received_data":25036,"sent_data":1008,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"microsoft-teams-co.in/","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"ip":{"addr":"121.127.246.69","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee4554013d62452b659123e5aeded52c","sha1":"825f58e2cbb4645ec4c49bbf2d5b21e5b3db63ac","sha256":"6a4485e5d69464126277f2a7fe82c710da664117b09ec307132b234739cd123c","sha512":"040b8cf811bdc6d80bcafb97c7d3c557226aed15c256900e2caa4b86fa01b9274fcdb3af23078ea0e33ce9e17c10ebc609728a8551c79c633218645f6f156271","ssdeep":"","tlshash":"49f095af7510453905c76797b3ef67ca757240c7f9419410060acc85197ce4615a75f1","size":502,"data":"","first_seen":"2026-08-10T01:55:40.081192Z","last_seen":"2026-08-10T02:01:43.433256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"microsoft-teams-co.in/","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"ip":{"addr":"121.127.246.69","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T02:01:15.099Z","timestamp":1786327275099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft-teams-co.in","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 06:37:47 GMT","end":"Fri, 06 Nov 2026 06:37:46 GMT"},"fingerprint":{"sha1":"98:6C:E5:FB:12:10:B9:33:41:4C:A7:29:6D:D9:81:EB:7E:63:E3:FE","sha256":"2B:85:25:DF:8A:2D:FE:10:14:77:E0:0D:E2:65:83:32:19:DF:AC:45:71:C3:76:B8:AD:5F:07:67:B1:96:33:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoft-teams-co.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 02:01:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Aug 2026 07:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a76dc30-5d6b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23915,"size_decoded":6797,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (502)","md5":"7e308a79cd879d318bb7492b492118b3","sha1":"6055ce4ce31cf6bd028de3e7249b93bc7814ae45","sha256":"905f9abefbfe2bff28e6fd1effd4c03deb1c1b7b887e0c96af7d98dd3a67f2c1","sha512":"331f2197da6a1f85bf0e59b3f0c2f6ae310acf25cab4db279983136c49026e8f477472632e00991ab533143734db8d50c37e0f801f3115bf13ac6bd183e2e6b2","ssdeep":"384:djcD/LvmoO+d2GtGZVLUBPMhsC8j6/VDSxxKMgy5v0L3DN9TOl+Ws:a7TmoOkTBP2z8j6suWl+Ws","tlshash":"8fa29419a3b0b23964def4a277941b3f6620d573eb5a4214749c72849fc3dfbd823289","first_seen":"2026-08-10T01:55:40.075083Z","last_seen":"2026-08-10T02:01:43.42759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1405,"timings":{"blocked":-1,"dns":606,"connect":264,"send":0,"wait":264,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"microsoft-teams-co.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoft-teams-co.in/favicon.ico","fqdn":"microsoft-teams-co.in","domain":"microsoft-teams-co.in","tld":"in"},"ip":{"addr":"121.127.246.69","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft-teams-co.in/","date":"2026-08-10T02:01:16.732Z","timestamp":1786327276732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft-teams-co.in","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 06:37:47 GMT","end":"Fri, 06 Nov 2026 06:37:46 GMT"},"fingerprint":{"sha1":"98:6C:E5:FB:12:10:B9:33:41:4C:A7:29:6D:D9:81:EB:7E:63:E3:FE","sha256":"2B:85:25:DF:8A:2D:FE:10:14:77:E0:0D:E2:65:83:32:19:DF:AC:45:71:C3:76:B8:AD:5F:07:67:B1:96:33:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: microsoft-teams-co.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft-teams-co.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 02:01:16 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 240\r\nlast-modified: Sat, 08 Aug 2026 07:35:11 GMT\r\netag: \"6a76dc2f-f0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240,"size_decoded":678,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"c98c2035e4ad696f0f7415ce4f51943f","sha1":"714ba4344a5742766d7541460b2f16c57afcc8c6","sha256":"ad1563c3973fd41cf8e516e6fa27115a31c53c3d206a4ae124eca98b32c5c02d","sha512":"9e6cd36da29918ec63b14ff2de3287658aea799effd6c7390df5c6947baa0330942ceac019aae245e93e379c574aa2c7b339791ee85bfdf5c4b84d4897351dd3","ssdeep":"","tlshash":"ead097c33380883ce92e0f3320444868aa9f04acb82ae3040801d1ab3932384d28ae82","first_seen":"2026-08-10T01:55:40.078281Z","last_seen":"2026-08-10T02:01:43.430043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"microsoft-teams-co.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}