{"report_id":"b9b3ffa1-69d7-4b88-9198-cb210a4aa374","version":6,"status":"done","tags":[],"date":"2026-01-14T15:12:03Z","url":{"schema":"https","addr":"teams-meeting.com","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"title":"Microsoft Teams_免费Teams_Teams视频会议-网络会议与远程办公","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"teams-meeting.com","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T15:12:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-14T15:11:56Z","timestamp":1768403516,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":60902,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-01-14T15:11:56.640023+0000\",\"flow_id\":1506656042927127,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":60902,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-14T15:11:56.640023+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"aiff.cdn.bcebos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"mall.yuanruan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"affimvip.baidu.com","ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":839480,"first_seen":"2024-04-13T15:35:13Z","last_seen":"2026-01-09T07:38:37.279895Z","alert_count":0,"request_count":5,"received_data":1977,"sent_data":4763,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"goutong.baidu.com","ip":{"addr":"183.240.98.82","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":1892068,"first_seen":"2015-01-05T10:13:56Z","last_seen":"2026-01-09T07:38:38.058845Z","alert_count":0,"request_count":1,"received_data":7252,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"safe.cdn.bcebos.com","ip":{"addr":"60.188.66.38","port":443,"asn":136190,"as":"JINHUA, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2014-08-28","domain_rank":754331,"first_seen":"2023-08-17T19:57:24Z","last_seen":"2026-01-09T07:38:37.280819Z","alert_count":0,"request_count":1,"received_data":164175,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mall.yuanruan.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-03-19","domain_rank":0,"first_seen":"2026-01-14T15:12:05.273894Z","last_seen":"2026-01-14T15:12:05.273894Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":741,"comment":"","tags":null,"fingerprints":null},{"fqdn":"teams-meeting.com","ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":45,"received_data":1080706,"sent_data":23891,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"decimal.js","description":"","website":"https://mikemcl.github.io/decimal.js/","common_platform_enumeration":"","icon":"decimal.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"sofire.baidu.com","ip":{"addr":"36.110.192.107","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":119237,"first_seen":"2017-01-30T09:11:21Z","last_seen":"2026-01-09T07:38:38.355201Z","alert_count":0,"request_count":1,"received_data":1149,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banti-static.cdn.bcebos.com","ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"2014-08-28","domain_rank":656958,"first_seen":"2024-02-18T12:17:07Z","last_seen":"2026-01-09T07:38:38.267468Z","alert_count":0,"request_count":1,"received_data":248507,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"passport.baidu.com","ip":{"addr":"45.113.194.250","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":233248,"first_seen":"2012-05-22T11:43:45Z","last_seen":"2026-01-07T10:46:10.252703Z","alert_count":0,"request_count":1,"received_data":292276,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-01-12T01:35:28.651228Z","alert_count":0,"request_count":2,"received_data":30892,"sent_data":1246,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aff-im.cdn.bcebos.com","ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"2014-08-28","domain_rank":1899699,"first_seen":"2022-10-27T15:17:31Z","last_seen":"2026-01-09T10:03:35.9669Z","alert_count":0,"request_count":1,"received_data":402124,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aff-im.bj.bcebos.com","ip":{"addr":"103.235.47.176","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2014-08-28","domain_rank":3085205,"first_seen":"2023-05-06T09:35:51Z","last_seen":"2026-01-06T22:27:59.844476Z","alert_count":0,"request_count":1,"received_data":19056,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aiff.cdn.bcebos.com","ip":{"addr":"111.20.254.35","port":443,"asn":140105,"as":"Shaanxi Mobile Communication Company Limited","country":"China","country_code":"CN"},"domain_registered":"2014-08-28","domain_rank":2039382,"first_seen":"2021-01-01T15:11:42Z","last_seen":"2026-01-07T10:46:09.632031Z","alert_count":1,"request_count":1,"received_data":184464,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sfp.safe.baidu.com","ip":{"addr":"36.110.219.204","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":504736,"first_seen":"2018-11-15T05:34:37Z","last_seen":"2026-01-09T07:38:37.562886Z","alert_count":0,"request_count":1,"received_data":343,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aifanfan.baidu.com","ip":{"addr":"157.148.69.59","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":2016699,"first_seen":"2019-07-10T03:01:13Z","last_seen":"2026-01-07T23:37:37.256217Z","alert_count":0,"request_count":1,"received_data":124375,"sent_data":528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banti.baidu.com","ip":{"addr":"163.177.18.27","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":623642,"first_seen":"2024-05-14T06:27:27Z","last_seen":"2026-01-09T07:38:38.406153Z","alert_count":0,"request_count":1,"received_data":1076,"sent_data":537,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?4f421a52fc369327eff75f8708b708a7","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a8f1ce2a4e15fc1ce4230720db91b09","sha1":"26e29add9ccbfe9e0597a5583f8a7318979c0a8b","sha256":"df0bb014b4d4967743716df58fa91d2d18b187bdc896b9c8fa8cfa6df4f60e2a","sha512":"63744a21bd7b54c3db30e3894b7784e262241a46c376cae10b05053befff5b5dafd7f0535f9463d609ef0e04eab6299c4ee38e031355beca5c71acf83378ae35","ssdeep":"384:i+JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:i+4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"f1d2d9a9b282713293a324a5153f324ef17b5a54bd4968a4f11894c07d38fbb027bfdd","size":29910,"data":"","first_seen":"2026-01-14T15:12:30.744644Z","last_seen":"2026-01-14T15:12:30.744644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"cdd4949a6afcda23d13b0bbbb06b55f3","sha1":"2331cc864d3cc358d143eb89f964cf9df1a47956","sha256":"a1610f20775dc9cf57edd43e965fc5c2c9c907f6e528056ef7d0c53839295ea3","sha512":"4790c0ae8b5d4d3748802a96d58e94aa1756a4964d082101034aa9e6cc4023b84759a6a7054263fd61f91f4439b1454dc4f8abfb0b36427f1306a704ccd68bbc","ssdeep":"","tlshash":"70b02b49b2c1711ce38324a9a48e1406f034ffa48ccc8925cc67f8801c972104182cac","size":129,"data":"","first_seen":"2025-09-09T13:40:58.939033Z","last_seen":"2026-06-06T18:15:47.220026Z","times_seen":1711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"abc1182b071a40a4a8f10e341441cd7e","sha1":"4173e685730d40f6024caf94d2a27b022e482042","sha256":"481c898babda94d23ae30fbd1c30729b948a3b798eda9205e57a0605f223bcf3","sha512":"5fe7e57dc45ad753856f98a66e58ad071814e447b69b2cbca50123db04d661a0e6f7902f3ee721de5bbed6c9d4c09978b2b7f7fa5b612e54353cf42de1eb0864","ssdeep":"","tlshash":"fba0129231c2d0148342021400160705e13d04a0245d14c8c0085453389101095158bc","size":76,"data":"","first_seen":"2023-05-05T09:08:28Z","last_seen":"2026-08-12T11:58:32.206392Z","times_seen":3158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banti-static.cdn.bcebos.com/o/static/banti_4984ec8f17.js?_=245611","fqdn":"banti-static.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a61a1a1bbcdc8514c28336c21b66fd8f","sha1":"44b99021874cb7834741530e11b093d70ccb9484","sha256":"a96d8e2fe852d27c2d0f0dbd0bb472dba5ecc704a56746eae823b5df6ea7ee47","sha512":"c6926617d298d85c49aa2cec8d6082689c903dc9a2e2179d60c070d3789482e4dfa4db273cf5c095e382d8ad498a04039758c6dcc1094033e9d08dbe012c6519","ssdeep":"6144:FpIC4qN7bHVVUuuK7/eIaVnv0ZMHt7wCAiETQGsLDhFEQcK+zI:F6C4qNfHVmuuK7/JaVv0ZMHt7wCAiETU","tlshash":"0234328f6fa0b16aa79d40df9a0f00aefb2a1ca123f37641c2f925c91d5d556d061cec","size":247655,"data":"","first_seen":"2025-11-20T06:55:53.175125Z","last_seen":"2026-01-26T09:23:39.885048Z","times_seen":725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safe.cdn.bcebos.com/js/dfxaf3.js","fqdn":"safe.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"60.188.66.38","port":443,"asn":136190,"as":"JINHUA, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"869f0ada2903e2c08dc7224c11e94f3b","sha1":"430d5cb207c82132810a912ec4d6a615c504d7c3","sha256":"4d947ccf8788d0734bd9158fd58d9ad8afc0e6ede1aeb4ed93a3d5bd950a79ac","sha512":"7c0d464c43c52e74f4ca62a2f3bdb88f9183fa6c9c8b4df06926b4bde5b209b9be81b7e8eca08738831496ccd3d5becdce2fc195b2173830d4f9f09da5199fca","ssdeep":"3072:riCbL4QriT9ZqNy4v9tCH3F4CzGaRxAGjXkKwgorhURyGdK7oorDdoGVWxWQumN2:rlbLviT90Tv9tG31zGfI1g9xKw5b","tlshash":"8df3a3cc7ec1787d075350b9072f201b716aee64684ee981d861cada3a78b8d8067f7d","size":163381,"data":"","first_seen":"2025-11-14T02:23:10.808796Z","last_seen":"2026-05-22T16:37:37.498055Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/respond.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"afc1984a3d17110449dc90cf22de0c27","sha1":"b5aba40d65b0d6f85859db47f757ea971a0efd30","sha256":"83a8807ef669fa70d0d9375347f5552897f76c6ae8e2e6f97ef592595462d8d1","sha512":"a9656fade32e1fd8b40ebba070eb627f176d6550412f45fbe6bf58c1e5ec7421ed5d489d95cb70ecd5e0e4a54fdc84cfb6a6764b9ef9034c0592f812d9a9ea48","ssdeep":"96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam","tlshash":"0d91d8d923243458b3a735695a7e8529fc33aca675184880d425d8bc3da4fec10bbeb7","size":4377,"data":"","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-08-13T00:50:57.670615Z","times_seen":1265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/jquery.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a13f7f208ba534681deadb1ec7a2e54a","sha1":"3f51e2eecfa88c61e1200a48ed14f2cdda98ed87","sha256":"d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220","sha512":"63535b5944b535a8d3343ae691c15a5cd1211f1fb071ae3a8ea076eb12492c827ba18f6253a353c9341ab329d90a6accde473ab989f4614bb34ebf43ccf11765","ssdeep":"1536:lYRKUfAjtledhTmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:cUb6GvCD0932o2skAieW","tlshash":"5c93e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94843,"data":"","first_seen":"2023-03-07T01:34:33Z","last_seen":"2026-08-12T02:51:06.956818Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/MallRequest.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ebace329b79abdd1d96a25973d123a5","sha1":"99b88efe9244ad7dae94285b49f655d12f987cf7","sha256":"8336d67fa6a5f9991e233cb96773bdda68c8a97bebee84174c69f22bf95455b5","sha512":"11f8a1833343356d23da5bef8472967107623031346013f6474a7cd7d616bbc856d69c8804250840dc3421e9d133912d89a8898cc5811aa2810c8abaab4a7e58","ssdeep":"","tlshash":"d961518756bba04348f662a5875e5590e86399633350c411343e6b8c2ffae1c92f7ff8","size":3279,"data":"","first_seen":"2026-01-14T15:12:30.726482Z","last_seen":"2026-01-14T15:12:30.726482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"7efe0ffd84213001e51ee69ac6a293c1","sha1":"a34849ec6133b132b1623ade598de0bfdd211dc5","sha256":"50cf31036ebd231fb79f72d4b36c9f1cd0e1c2c855d6cc933044a5c29352dcc4","sha512":"44920ea693ae07551cda1cefd8dbd31f6fd677ba01d8f9c07ce32447d0bbbe801048db20def95997487068e6a9291944dd9086d3b36bc23a191103b67a87e4fd","ssdeep":"","tlshash":"88e02bcd63875989a7d325e0b0b33419904a0d3ba996dc74ead5685124e5a3718c10df","size":433,"data":"","first_seen":"2026-01-14T15:12:30.770939Z","last_seen":"2026-01-14T15:12:30.770939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/jquery.glide.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"be22eef9490c48828a12158712899b54","sha1":"6cff622b17e4ccf7fcca19725d897e01317d93f2","sha256":"9e113e42e67467928c6619044d9feb529909c0e3c20366af009fbb43ef01dd41","sha512":"08a8bca1f29a5a7364bbe891a2d01726cda9840bdc6dc60534f956f7346052639ad1592681c55044fc9f5aefc3058afe89cee6fda51aa1efad8cae40ad566a0e","ssdeep":"96:HX0lW4Aef3NmFuRzfghK8pjenV6kxVu3N4HcbuT+RTW:ElXAefdmFuz0K8pjentJHS0+RTW","tlshash":"a2a1651567a83325c1d331f9016b9e4cd37793358203828e71a799c2196ea085b9ffad","size":4865,"data":"","first_seen":"2023-07-03T08:30:02Z","last_seen":"2026-07-16T18:47:16.025246Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed5825259e9397780010c48000b8758","sha1":"d945146080ef9ab349ea6d22bc68456f58e30e26","sha256":"423cafc9d8664b249ff2fda770cb1b0f4e63de0eb9c89b46bed5bacf770ef28d","sha512":"8f7a54ae63eb887ce39107bc6c16a63e9f36b0674b2f0d4f0a6e8764c69a2fff6d52b55a69993f2ada1843841daf158132066d7409db6b643d2d8a8cc3e136de","ssdeep":"","tlshash":"b0d0950f2c1914342375047c51b6e54cb573144c907dd50141ddf4d14960fd70c3d7c8","size":254,"data":"","first_seen":"2026-01-14T15:12:30.772347Z","last_seen":"2026-01-14T15:12:30.772347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/commons.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"27657cb3ba00bc14261f8b389e4b960a","sha1":"489fee96de1306552f1d4d8f2038dcf80cd35719","sha256":"4e1e28ab0eac0c8ea0d9d914102909b4e1a9d9e27987620ee843ac10e7cc1724","sha512":"4096d0961cfb38241c05ff6a627932cb4b3048bf697c4136f0b1c06b475d35b8e7a140c4d5e2c887b08831166bc5db135b57af8884a96f5cdf669d3bfadd2af1","ssdeep":"192:zMdvlZnatIYU5vG69CGs2JWqUHP4w/H4Nj3xgN8v9iza:wOGTwgNj3Sk9im","tlshash":"4432c844f6a81168207b727a1b7b1589b23a056799418c00f93c55f03fe0f3e56aff97","size":11207,"data":"","first_seen":"2026-01-14T15:12:30.735153Z","last_seen":"2026-01-14T15:12:30.735153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-13T08:12:43.343589Z","times_seen":121776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/buy.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"684701553dd2cb304f778b6d448f498a","sha1":"41de244f138ef09e6ee1b830720d93467468f23b","sha256":"de111ad0fbd60c93c45e65bb33d7f595b74ff3e546472749571322937a17f5b3","sha512":"be391c229383004310934ae717a4f40597f81d50f2a504796f6727a0ae13d41c6e9fbd87b42ec2c6817ce989a5412a1e8f8beb28062a6768e4a7e41fe65d7718","ssdeep":"1536:B9BSKO+emfx6YsL2sdsY4Ql+Wrh6wZW+jwoUv1wMFMDz3NQFE/ThGeTM80/D1E:B9BSKO+eax6YsO5wZtUFeq1E","tlshash":"b7a3a55cf9a344d668b3206a5f6f2000ba59945b9708cc10fd6f6be01fc1f18e997be6","size":103133,"data":"","first_seen":"2026-01-14T15:12:30.728983Z","last_seen":"2026-01-14T15:12:30.728983Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/site/aust?op=0\u0026s_info=%7B%22lang%22%3A%22en-US%22%2C%22cbit%22%3A24%2C%22rsl%22%3A%221280*1024%22%2C%22tz%22%3A%22UTC-0%3A0%22%2C%22xst%22%3A%22%22%2C%22bd_bxst%22%3A%22%22%2C%22bd_vid%22%3A%22%22%2C%22referrer%22%3A%22%22%2C%22xstlink%22%3A%22https%253A%252F%252Fteams-meeting.com%252F%22%7D\u0026url=https%3A%2F%2Fteams-meeting.com%2F\u0026siteToken=4f421a52fc369327eff75f8708b708a7\u0026dev=0\u0026ser=3\u0026v=176840351448823617\u0026s=18377885\u0026e=7282572\u0026isAFF=1\u0026filterAdvertisement=1\u0026auth=%7B%22anonym%22%3A0%2C%22key%22%3A%22%22%2C%22id%22%3A%22176840351448823617%22%2C%22from%22%3A4%2C%22token%22%3A%22bridge%22%7D\u0026AFDbiz=%7B%22ev%22%3A%22page_enter%22%2C%22customer%22%3A%227282572%22%2C%22bid%22%3A%22176840351448823617%22%2C%22length%22%3A0%7D\u0026AFDto=\u0026AFDvw=\u0026AFDjt=31%24eyJrIj4iNiI0Iix5IkciQEdHSkdESEtIUFFSUiJJIkFqIjwiNTw8Pzw5PUA9RUZHRyI%2BIjYzIlEiSlFRVFFOUjUyODY7NyIzIit5IkYiQz9AQSI%2FIjkiUSJLSE5KTUxQIi0ibSI%2FImosT3k%2BdjhXQGJ0OTczLTI6SkhyK1JtNWJyTEdXNl1RK2thc3pFT15wYnNLOWlpYGRgcjhSLywyWDl2N3VpUTZbOXBPeG9lPkhxeVNrKkgzP3o%2BOFM7X1A1aHVqcjpnV1B2XC4sel1bQGQzc3pXV0U4TCpvNk45Q2I3UXVIXDtLW1JiMFdBVWM2d1lJZl9IWkpDXGZtVU1jZnZ2bHhsOWtTKk9dPz0rZTJxKzBML0kvQjNKWypOLEk0Vmxlb25MdE9pWjVCT0FPaXUyZUJIXjpsRywvS21fMEIwb1NqeExqXGJwU1swdmNpaWk3bXV2Yno%2BUDAsQVVXOTdXM3ZsUltQXGNhWUReT1t2c0Y5W3hHOW9cQjVzNTNxL2ttd3UsKlNQd2RdYzxGVkdeNjg2SSpbTDxBU0xSQEpsUUVOeWs%2FXDBvVUMsUltEM2dhVi9faD9lT2twKzM7bGJnajlzcFoyLD9OUz9lXGljNk98LmVgRi1sa2dgUi9hQXZLV2t0XGlxY154ZHQ1cmliLjpoR2VnOEspbU9uZ1x8MjJ8NTlraGtCb3BvcXNDRUNFdEtFSkhRTClRVFAwV2RmZGkifQ%3D%3D\u0026stamp=6246\u0026cb=jsonp_callback_96593","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f9c75ee8ae4bdd92d192a77fc3e713","sha1":"e329ee00c1c9031ee868777baf5e93d3952df659","sha256":"684f6c90ef9b171a5fae7dfcedd6702f1a37aae7dfb126fe9cfa8823a4ab4143","sha512":"ab9a06532c114a59189a336748e5178475c0a1f579062339168f841ddbf1c654b4d1f7d55f1e6b085c40e805e7cd970cd2aac553cb0f0eb92262128d9160a381","ssdeep":"","tlshash":"35e07dde3498d0a3ad60275925a66327c34d6801bd98d3cce85ebf18251c5a06f05216","size":333,"data":"","first_seen":"2026-01-14T15:12:30.763521Z","last_seen":"2026-01-14T15:12:30.763521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fc1892e770f880ce9a7f1088d75f59e","sha1":"77f500ff31a169d5d9e8f3d26dd6c83b3f440e66","sha256":"a7769797abb268910c99acb69b00af09b78a699b47159e14c8bc5dd1ae93f609","sha512":"702b6374ff7d512f00cd5d37a52ee4957eeb4a876886cd8370ea62f2cc8f726ba60fb9038da1d8e28b2a766407c15780fe9a0152722871331542d6b4fecdbb01","ssdeep":"","tlshash":"65216000f1d44bd1847b72789c1bb8a6772d1c20792bae4986b980311cb8f7ca35ae94","size":1116,"data":"","first_seen":"2026-01-14T15:12:30.77391Z","last_seen":"2026-01-14T15:12:30.77391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c851f081c41d465e171b4d79164239fe","sha1":"1313c78e4fef6e8fea59e0d5068f35e6c4184214","sha256":"9147078d88c8433de5816f24cb19f4d217c2e244e370237e2258b2a85f63bda1","sha512":"65d48caccdb95176052a893825e7369cfeecb24bf9b20b42dca97f42c8db531ef9731b2a862618f86e346ab979c2da3f62bf82db9b80b60b3a3bda3ed50eb993","ssdeep":"","tlshash":"3fb012f944b1025799f18b90400a169f0fc70a18d8a5c3449474190d085191a2806428","size":91,"data":"","first_seen":"2026-01-14T15:12:30.774737Z","last_seen":"2026-01-14T15:12:30.774737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5acb5366416f9849f1628aba518ad851","sha1":"a3e7040598356956b3dec0e77c338b83da8bb9b5","sha256":"c88e7d4fc355ed4f82ca6ba384e74161520f3f4e5c626f0a9b01825a3409a57d","sha512":"68ed91b4b9fc54d4f4589b18e080f6a5332db94a2741894f6d38d9468146e485ea3ca88b549e7173dd189f40572a94bbc76ce7ca66f071a242aa659ac535c64e","ssdeep":"","tlshash":"3f41f14f888d38b8c123519d22756906c1e52737644946e6f7ef1e3a6f3bb09310978e","size":2178,"data":"","first_seen":"2026-01-14T15:12:30.775547Z","last_seen":"2026-01-14T15:12:30.775547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"eval","is_inline":false,"md5":"7aabfba3a549749dc5e995ec5be7923c","sha1":"0ff49a1539a7091bec4ab01248644f7c04f82f18","sha256":"63c1634500cc553e021ad13a8109edf8ebd8aa640f661f0f88a9ada33871bb3e","sha512":"99e1887bbb36e0f0168e889415b6b884c0cab82e61db52730769c23ea2af935aa7f9534d7b13af4abe8682eb156747c42487fe9f8f18aef5264e9b1e0d298064","ssdeep":"","tlshash":"f2500030000000000000c00300000c0000c0003300000000c0c0000003000000000003","size":9,"data":"","first_seen":"2025-10-23T09:57:58.04045Z","last_seen":"2026-07-02T20:15:09.806217Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"3c8ef8b5168df5385c97801c83c09ae7","sha1":"c31af2dba3e7b7e4bec15616338552e3229f6ce7","sha256":"b1d78af77f161a8d8c7b9dc5bdfc84f5589caa29cbeb98deb2b51c2560b66c21","sha512":"f989ff6d6e4d4869fefa27f35a20f1ed8150f40d75cca1853d24eaa3a35597dad45ba43071d7129a72d38a3592ebe4db257f93d1fce80c3126160a096bca6fa6","ssdeep":"3:TMQpoIgl1dHoOTqeNfiNMJNLxgLBXZdGNecY:AL5uOOeNfiNMlg1XZdGNi","tlshash":"fd932b4630d10110c9b20270c837188da03044f000c40500516448610ee4421d26fc1c","size":95647,"data":"","first_seen":"2025-09-09T13:40:58.943219Z","last_seen":"2026-06-06T18:15:47.220627Z","times_seen":1709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passport.baidu.com/static/sdk-machine/js/mkd_v2.js?_=1768403514499","fqdn":"passport.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"45.113.194.250","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b4238ce102b5db67e07c39791a9dcbc","sha1":"57bf2b215b18f06beffa3e2412bd60fc79dbd486","sha256":"f9f0f73c030b3e43cbd61101f797b5955272b451223f91e43b7277fc4f10fc2f","sha512":"e8f6abd984532d66290610e3da60f1856c4cdfe1d7eabe56c6066c908d36ad3ee598e5a0bbb378e500018e76ab49b2c1471478e4bfb427b245ee9c2c5f763dfc","ssdeep":"3072:z4OBppsQvfDRXSk/LRKcYDRuJ7UbIjy6z/kUZZ:EoppsQHFZFKcIRIgbIjy6YUT","tlshash":"59544b89f6d1b0b102e764d0416f560bb27a7525b00a85d8f679e4e19ebc8cea137f3c","size":291760,"data":"","first_seen":"2025-10-15T16:36:18.034044Z","last_seen":"2026-05-22T16:37:37.518352Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.base64.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ad7480ebe1377d3b32bae529c60899","sha1":"80469d9ce44c69b11e6c0cc11bb6945a6ad9c9a4","sha256":"9b4f8c17d9d4526f4f7540508b733c40a1405e2ec9903c81d44d7f3f3631eb6b","sha512":"bb607a2dcbd1db26dd9acd8d89b2827794605ab4723b85063f02ccc4ef0f313b669a52cd237e34aac54b576926a262ded8983e7229befcfdfb92fd18f842cf42","ssdeep":"96:y+veaO7wyO7VUtro9mLp/iZZe8naRhIMRnRf2MTEcKFrzkite0G0:zvs7jO39mkHe++IK2MTYMite0G0","tlshash":"c5a164593dc324d51ab335291befa489f83e66034a5ce481fd2e27e84f6547484f9f88","size":4668,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-06-08T22:33:07.896233Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/decimal.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3bf8c1ce476d636ef3e8b52d72936ea","sha1":"b35967121424d8fe7fb382320f469b8862d86e90","sha256":"aabf3a9f010b69a50bc8ebde16df5171c717ad7138c09d58620cd552dc783547","sha512":"46dda36aa0e6770d1b20f8b33cd92c6b9c541ea5b84f9f6dc07040c237757d2a3ea4b004df1a85900b8230559cb8c8d12dd22aaa0e83c5922a96e1cc50d56dff","ssdeep":"768:kDbUlh3OLA9yve/p+jGa5B36cm1tLDnGdiXo3FHwNkFLaoy:kDbsjwvehxl6+HF","tlshash":"12e2f8d432b2f0c622e328e140ff9447f2366d55a94d11f4e2489af53cb26c9a27af74","size":31527,"data":"","first_seen":"2025-10-10T09:11:33.840532Z","last_seen":"2026-01-14T15:12:30.711208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goutong.baidu.com/site/696/4f421a52fc369327eff75f8708b708a7/b.js?siteId=18377885","fqdn":"goutong.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"183.240.98.82","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"544fa3ea2778e6e31be524d09add1dc5","sha1":"01e3061487c687c7fb4a93072624b16928ba5b81","sha256":"2e181d58a7f7b509ed91b00f9ca3f39e0cbceb72c2859c815c0c3e83134c134f","sha512":"205ee0c0817fa877004ef58d8e82058bf5b522219a50ffe223f95c5f70308dcd7b1cb6472acabc910e9aed60bc1f8969c8c62b38d2a6c62c8f2b3acd86bb95d4","ssdeep":"192:PeTSPpAgOC5SRFwK/mtXAHaCYViC5HOZDY:7pp78RUOgZgDY","tlshash":"5fe1e7044aa889bcc78355e95c0b3d0b9c6eb215cf4c4f09eb9ac5687bc5dad1a03f4d","size":6805,"data":"","first_seen":"2026-01-14T15:12:30.750941Z","last_seen":"2026-01-14T15:12:30.750941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T08:30:02.731416Z","times_seen":742668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.cookie.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"edc10b86ca957a25d988ab51164af396","sha1":"7b5869434c13a57a969156ad179ff7f7ebe988bb","sha256":"c23280badab3a006be305720183f7d3cdb66ab2b796e9707fea3cb2e23bb68d7","sha512":"22d4089b224c105c568c52fda910a263a5f41d824c3a82ff97f9558dcf6815205e0ab09efe327dd2d087f3bda45a56f0b68b0dd9b84ca3797ce5f3696d5e4e9c","ssdeep":"","tlshash":"b6117b08218c1a0c45db17c23e39258ab478d7355456506cab496be03674e43d8e75f6","size":1015,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-06-08T22:33:07.89749Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/fastclick.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0fc6c24d1f3ff9ac281887c92b24acd","sha1":"2cae0f5a6c5d6f3cb993015e6863f9483fc4de18","sha256":"b7a4abaaf4d098aa06822e4b3a5d00532fa5051b48bc427efbea4b02c7c08d6b","sha512":"a87f91e982f8ff8d22888ae737968d675b047846a5340767ccff637ecc453c1748b254e4c1475d9126b38d55a12777ffdd8dba405e9aaa5d317a77ae570d21fd","ssdeep":"192:BUsv0Wo2Go2VCa3nNCvprG3rIl0yRU5i2:Wc0Wo1oXa3ovIbU0yRU5i2","tlshash":"fdf1858b36d7257202e7a34da2868706737b91cfd509045cb431dce12d7cea662e2bb9","size":7799,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-08-13T01:51:01.649195Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.qrcode.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d2a24b990bae5caf90e5945dba41c56","sha1":"553ddcb7dbeb38531296ab417d7eeab8cd267e57","sha256":"a00e6bdde608cc4e50995ca97564874ea22d2837023881a83cf56a37162480f9","sha512":"501d01adddccc0558b30157168ff82cf1e53f9f15bf5fe909baabc6c4dbbab5b9ae5d84f06c68cd4f4cab9e001d67ffa15ef560d9d92c43cba2e3ea4f641e551","ssdeep":"384:DbEMd9QIIAAVTRjjrlqwbHHfsgDZUnEbx4go:34Fb1w","tlshash":"e452c7d1f39141b7b1466cd8681f249e94a8a4a3ac15955cbfbcc0e2eb78fe15478f30","size":14248,"data":"","first_seen":"2026-01-14T15:12:30.743561Z","last_seen":"2026-01-14T15:12:30.743561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiff.cdn.bcebos.com/sensors%2Fonline%2Fsa-sdk-javascript-1.26.2%2Fsensorsdata.min.js","fqdn":"aiff.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"111.20.254.35","port":443,"asn":140105,"as":"Shaanxi Mobile Communication Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7dab9ebd3ba4d90202b17a796f36fb","sha1":"770f1a5958c42e69717f97a8c23db31c1374a7cc","sha256":"321c6d6698415176d76e0e1e5ab6d6b9928467d9f1f882da76cf51c8039a8605","sha512":"6a1e23959d1efcd45ce5861b06783c7b102e0fcb5dbe92e48c577865d7fc7df2fe598d8fd0db05fe10915ca45cc551c79c5ec40f0936938e66ebaa4b5ecf392d","ssdeep":"3072:t1x8322hli+/kSWADCmC5Xcz3vLtE2cHCrg0Vvy2AiM1g4JXfg:F832Z+/kSWADCm2Xcz3vLtE2cHsVIlK","tlshash":"76040acdb2d2b43746f73138a46f110ab23eaa58680e8164f275e4d53d78d09932bf6d","size":183695,"data":"","first_seen":"2024-01-21T00:33:09Z","last_seen":"2026-08-12T15:09:02.998971Z","times_seen":2516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/assets/js/cms.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"671ba2f4155c570c887eed45c02cd77c","sha1":"005035d2b4fac7e2db5213f636d346c5a2b44f45","sha256":"4af9070134c6bf5bab6ab1503f8ba24a40dbf361d425f17778ba19bee1cc81c2","sha512":"45e14ecde7dee590a34a2415b10de989ae8eb7ae3720fe65e3d3e77e42efba184d668fa6c4d913532e6b88732bacbddba478fd81bbb899b400b5f13c780fa89b","ssdeep":"768:621fBkVPoVLWyAK0lxZbf8ruqeai4qcIs6IKV6Tw2ChYJOKOrCi93i+WzDtAFfpn:HfnFlAXaOZrF9yLzSBpn","tlshash":"1f13f74db580356b22a75076801fb50b31716e24eb0b8514f223f1b96dbcd9aa273f6f","size":43797,"data":"","first_seen":"2025-05-29T22:31:05.289237Z","last_seen":"2026-08-01T14:03:56.847721Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bb0c418465c6e44b51dd93a91118ad7","sha1":"05e2524c0fdb912cfdd2fba2654b97366e27e396","sha256":"44857d604a92b08ca42bed9f2892e0becc12b5dbf9094f02c438c0aaabb4c641","sha512":"b7577da5c086bc54334c63900597e998ef53d50b54c991dcb4a6312218c957dbe514467313bde010940deb5f068d1b9dcee65ed20aaa286f5d4616503edd3bca","ssdeep":"","tlshash":"65316b5d779314602973b0674f7f0301327622e32805cad0bc0eadc12f9591baa97bf9","size":1825,"data":"","first_seen":"2026-01-14T15:12:30.777737Z","last_seen":"2026-01-14T15:12:30.777737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/count.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eab5909f9376e55048a29e48d71d9b1","sha1":"609fbab711d52a19d88d6f6a326ad2d54cf1dd83","sha256":"887a9def68fceff5afb0102612fb8b4a57634341ba45d76a76ebbbfa72cf47d6","sha512":"d91a23e9768a2380cf541c35ecf05477b8b153fec89dbd779762b750e0dd7aafeee6e4968f137bcac0929b803c0dfa8864e1013e66f79cf2b70d66ceb6ae927c","ssdeep":"","tlshash":"f87134ca7a7325235f9b23e3266b0305f43144b0bc094d7895bd52e66e2341b83877b8","size":3794,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-23T01:12:09.453589Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aff-im.cdn.bcebos.com/onlineEnv/imsdk/1735891798/affim.js","fqdn":"aff-im.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"26c105bb752988007dc53f6a90d5aa6e","sha1":"c44d9e2cdfd24dbf6e157e61e7a60705b743d512","sha256":"6018ab052fb5dd689a39acfee8f0d99c2d9db4825fea427d89d30a90057ced64","sha512":"f1f00a74205bd2bc12ce8af8a413462ebd3dbdf6bef6afd804c33dc8b5cadac99c285c843aac0061e6f6f0ee5167d4f321f62b9f01aed74190bbe901e3173d5f","ssdeep":"3072:ljeD+mwXeH323GaOrXNVD9qpEQ5CGIHPSxi0XPLjhjLx1RWrRMwvAsovT0zI/:lje/xbvmb5QPCi0Xzjhj91RCMw4s0EI/","tlshash":"e5843cddb3c5b46553a37475043f210ab23a6f02a80d84a0e226f1d47d7ad9ea277f39","size":401345,"data":"","first_seen":"2025-01-15T01:40:47.826375Z","last_seen":"2026-05-22T16:37:37.457141Z","times_seen":2256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"abc1182b071a40a4a8f10e341441cd7e","sha1":"4173e685730d40f6024caf94d2a27b022e482042","sha256":"481c898babda94d23ae30fbd1c30729b948a3b798eda9205e57a0605f223bcf3","sha512":"5fe7e57dc45ad753856f98a66e58ad071814e447b69b2cbca50123db04d661a0e6f7902f3ee721de5bbed6c9d4c09978b2b7f7fa5b612e54353cf42de1eb0864","ssdeep":"","tlshash":"fba0129231c2d0148342021400160705e13d04a0245d14c8c0085453389101095158bc","size":76,"data":"","first_seen":"2023-05-05T09:08:28Z","last_seen":"2026-08-12T11:58:32.206392Z","times_seen":3158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-13T08:12:43.343589Z","times_seen":121776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/mall.init.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d56bd993598ae513b7808cdf9eea721c","sha1":"e0a37be52cd8090a779556c83fe5c43f611c5ef4","sha256":"c80d2c63d292196eebc982ae2dc8c533bff230cdef5dc6ef77be21145c77e275","sha512":"ab80d7a072ab29102c2e961b665d029945b1787f9983b92c7822546674b3b70ce087ffb34bfd9158a5772af4832324953721af57a599068ed514513652cd87f6","ssdeep":"192:WmkKPlkLAexr7dTer5aeDwSxwhaW6wYfashAPyxYqasX3/shAkMn3y/g8tHgIpCL:WmBk0ep7dT0tCin/WDJlNL1He","tlshash":"d4628628bdfb1052a973e06a47bf3084f29899076409dc05fd6f17885f84908f5bebda","size":15746,"data":"","first_seen":"2026-01-14T15:12:30.720979Z","last_seen":"2026-01-14T15:12:30.720979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"60bb19ab2a56de37b11d04df681f6ee0","sha1":"cd5f38ca8d19989e372e1bb66130aade666ee63b","sha256":"3f7af3768d0a5463f3cfd93c47864c3f654c8cdb65e4ca6b24d5772365e6dee4","sha512":"440c1988acaa11d0037396a4cca8bc7dd21fd7cd28d5a450a63c1a773f6b79001ab7a3d779decbf443a772d487d6d4791c91c52bad164e6c720a69e9d9e95b03","ssdeep":"","tlshash":"6c6000c0000000000c3000000cc000000c0cc3300c03000000c00c3c0000000cc033c3","size":12,"data":"","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-05-26T16:00:06.07653Z","times_seen":6220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/decimal.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/decimal.min.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:29:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d23ea-7b27\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31416)","md5":"c3bf8c1ce476d636ef3e8b52d72936ea","sha1":"b35967121424d8fe7fb382320f469b8862d86e90","sha256":"aabf3a9f010b69a50bc8ebde16df5171c717ad7138c09d58620cd552dc783547","sha512":"46dda36aa0e6770d1b20f8b33cd92c6b9c541ea5b84f9f6dc07040c237757d2a3ea4b004df1a85900b8230559cb8c8d12dd22aaa0e83c5922a96e1cc50d56dff","ssdeep":"768:kDbUlh3OLA9yve/p+jGa5B36cm1tLDnGdiXo3FHwNkFLaoy:kDbsjwvehxl6+HF","tlshash":"12e2f8d432b2f0c622e328e140ff9447f2366d55a94d11f4e2489af53cb26c9a27af74","first_seen":"2025-10-10T09:11:33.840532Z","last_seen":"2026-01-14T15:12:30.711208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon04.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon04.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1089\r\nlast-modified: Tue, 16 Aug 2022 05:39:22 GMT\r\netag: \"62fb2d8a-441\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 50, 8-bit/color RGBA, non-interlaced","md5":"4c0686e0eafb0678ca9cc83e4e1411ca","sha1":"95ece82d1320a86ad40a935c9301b37c527896d8","sha256":"038d545576f637ef00c426ab7deef98662292f6e63b72f5b9ab69df948ab5c33","sha512":"dc88e6f24fdf0254ccfc3b86720cc227165ee5e0f27c4f6cf2f897f7610aed16feff854e7fe63edf317e4973ba21486ed6deac0ba2196498c2e551d0d73d4707","ssdeep":"","tlshash":"2b11e9f0fa10eef54e7e483a3d2a71146c0ca63459410fc2331d7758ec19eaac22480a","first_seen":"2026-01-14T15:12:30.712933Z","last_seen":"2026-01-14T15:12:30.712933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3842,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aff-im.cdn.bcebos.com/onlineEnv/imsdk/1735891798/affim.js","fqdn":"aff-im.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:49.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /onlineEnv/imsdk/1735891798/affim.js HTTP/1.1\r\nHost: aff-im.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Wed, 14 Jan 2026 15:11:53 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 17 Jan 2026 05:06:28 GMT\r\nlast-modified: Thu, 09 Jan 2025 07:13:41 GMT\r\netag: \"26c105bb752988007dc53f6a90d5aa6e\"\r\ncontent-encoding: gzip\r\nage: 36325\r\naccept-ranges: bytes\r\ncontent-md5: JsEFu3UpiAB9xT9qkNWqbg==\r\nx-bce-content-crc32: 1306439561\r\nx-bce-debug-id: a96plqOoY+nrxVux2wjKCx5Y/xS1IbndDr8m6SN5/EyTeH87XqHdWKjauRt2cuB0G6rRXBGFForJvR93VPmr0w==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: 91d1f4a1-1f25-4054-985b-608a5257a0a1\r\nx-bce-storage-class: STANDARD\r\nohc-global-saved-time: Wed, 14 Jan 2026 05:06:28 GMT\r\nohc-cache-hit: gz9ct64 [2], fzix98 [2]\r\nohc-file-size: 160096\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":401345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26c105bb752988007dc53f6a90d5aa6e","sha1":"c44d9e2cdfd24dbf6e157e61e7a60705b743d512","sha256":"6018ab052fb5dd689a39acfee8f0d99c2d9db4825fea427d89d30a90057ced64","sha512":"f1f00a74205bd2bc12ce8af8a413462ebd3dbdf6bef6afd804c33dc8b5cadac99c285c843aac0061e6f6f0ee5167d4f321f62b9f01aed74190bbe901e3173d5f","ssdeep":"3072:ljeD+mwXeH323GaOrXNVD9qpEQ5CGIHPSxi0XPLjhjLx1RWrRMwvAsovT0zI/:lje/xbvmb5QPCi0Xzjhj91RCMw4s0EI/","tlshash":"e5843cddb3c5b46553a37475043f210ab23a6f02a80d84a0e226f1d47d7ad9ea277f39","first_seen":"2025-01-15T01:40:47.826375Z","last_seen":"2026-05-22T16:37:37.457141Z","times_seen":2256,"resource_available":true,"data":null}},"time_used":6882,"timings":{"blocked":3035,"dns":1833,"connect":270,"send":0,"wait":813,"receive":0,"ssl":928},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banti-static.cdn.bcebos.com/o/static/banti_4984ec8f17.js?_=245611","fqdn":"banti-static.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"121.14.9.38","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /o/static/banti_4984ec8f17.js?_=245611 HTTP/1.1\r\nHost: banti-static.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Wed, 14 Jan 2026 15:11:56 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 17 Jan 2026 06:10:38 GMT\r\nlast-modified: Thu, 20 Nov 2025 06:10:29 GMT\r\netag: \"a61a1a1bbcdc8514c28336c21b66fd8f\"\r\ncontent-encoding: gzip\r\nage: 32477\r\naccept-ranges: bytes\r\ncontent-md5: phoaG7zchRTCgzbCG2b9jw==\r\nx-bce-content-crc32: 167566248\r\nx-bce-content-crc64ecma: 751092252700221216\r\nx-bce-debug-id: GzF/0iMsZknI2FJhHRm47h602RT6isQiEL87Vd/SBFPr6KCBqWE7zaxnmee53aWIMaN6AtbSslkYo0WUbJ3Azg==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: 914de185-686c-46aa-9390-8e7f043a4a37\r\nx-bce-storage-class: STANDARD\r\nohc-global-saved-time: Wed, 14 Jan 2026 06:10:38 GMT\r\nohc-cache-hit: gz9ct54 [2], fzix96 [2]\r\nohc-file-size: 247655\r\nx-cache-status: HIT\r\ncache-control: max-age=7200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":247655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a61a1a1bbcdc8514c28336c21b66fd8f","sha1":"44b99021874cb7834741530e11b093d70ccb9484","sha256":"a96d8e2fe852d27c2d0f0dbd0bb472dba5ecc704a56746eae823b5df6ea7ee47","sha512":"c6926617d298d85c49aa2cec8d6082689c903dc9a2e2179d60c070d3789482e4dfa4db273cf5c095e382d8ad498a04039758c6dcc1094033e9d08dbe012c6519","ssdeep":"6144:FpIC4qN7bHVVUuuK7/eIaVnv0ZMHt7wCAiETQGsLDhFEQcK+zI:F6C4qNfHVmuuK7/JaVv0ZMHt7wCAiETU","tlshash":"0234328f6fa0b16aa79d40df9a0f00aefb2a1ca123f37641c2f925c91d5d556d061cec","first_seen":"2025-11-20T06:55:53.175125Z","last_seen":"2026-01-26T09:23:39.885048Z","times_seen":725,"resource_available":true,"data":null}},"time_used":1721,"timings":{"blocked":1435,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/css/media-2020.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/css/media-2020.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Aug 2022 05:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62fb2d6c-743c\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29756,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"1f243643d37ab8ac12bd5cd1dcc23e5d","sha1":"f4f48e1ebc1df31a81b47c121c7913758ae12e9f","sha256":"cf4c55433843802c9f2d584843ddb031399fe29fa5e6765b9dd01dab8b1937ca","sha512":"207b386520249976f2b273204014ea130fae4cbea00acbe59e62b0694861c5ea29b5c8faeb083298e1bb9ba67d58d2ca3b530e52aa1f3bcb39de18814e9af4ac","ssdeep":"384:rn6DFNAAk/hE7PwhVcWRbTQ/lepvgZTi3uKgxt0sK+SKvVPQB4sLHYp81Z0Vp6to:GpVWDbTQNeTlHyvf6LLW","tlshash":"bbd22416da61202db45f50f7b4623eda7225a703f7138dbe81763469e98b0ad01f23b9","first_seen":"2026-01-14T15:12:30.715718Z","last_seen":"2026-01-14T15:12:30.715718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.cookie.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/jquery.cookie.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1018\r\nlast-modified: Wed, 03 Dec 2025 14:58:08 GMT\r\netag: \"69305000-3fa\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1015), with no line terminators","md5":"edc10b86ca957a25d988ab51164af396","sha1":"7b5869434c13a57a969156ad179ff7f7ebe988bb","sha256":"c23280badab3a006be305720183f7d3cdb66ab2b796e9707fea3cb2e23bb68d7","sha512":"22d4089b224c105c568c52fda910a263a5f41d824c3a82ff97f9558dcf6815205e0ab09efe327dd2d087f3bda45a56f0b68b0dd9b84ca3797ce5f3696d5e4e9c","ssdeep":"","tlshash":"b6117b08218c1a0c45db17c23e39258ab478d7355456506cab496be03674e43d8e75f6","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-06-08T22:33:07.89749Z","times_seen":78,"resource_available":true,"data":null}},"time_used":4544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2015,"receive":2529,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon05.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon05.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1346\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-542\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"ff3c328ba93c2f69a154582e6c6e85ff","sha1":"f6e395e30746aa9b5fb43a90991a8e8c0e4faf55","sha256":"c2c4fa429c12e13c39bcd91837ba8a271177ceda011db590b727fa740f23c98a","sha512":"1c37dc4a1008fd83b97e453ea4aa4b3043b794477830bdb61460c5184f8e02612a875a70dc06cb47d565793babb407582d597c5f9288f116c2c47f9cbd18db8c","ssdeep":"","tlshash":"8121d866814a62cfc698e5767a83431cdd00805e69a505b694e7fd1219dda3ed0f48cb","first_seen":"2026-01-14T15:12:30.717582Z","last_seen":"2026-01-14T15:12:30.717582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3830,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passport.baidu.com/static/sdk-machine/js/mkd_v2.js?_=1768403514499","fqdn":"passport.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"45.113.194.250","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /static/sdk-machine/js/mkd_v2.js?_=1768403514499 HTTP/1.1\r\nHost: passport.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Type: application/x-javascript\r\nDate: Wed, 14 Jan 2026 15:11:56 GMT\r\nEtag: W/\"68ec9c52-473b0\"\r\nLast-Modified: Mon, 13 Oct 2025 06:29:38 GMT\r\nP3p: CP=\" OTI DSP COR IVA OUR IND COM \"\r\nServer: BWS\r\nSet-Cookie: BAIDUID=B69EE8228B2707B6E28C4A7288166A75:FG=1; expires=Thu, 14-Jan-27 15:11:56 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1\r\nStrict-Transport-Security: max-age=31536000\r\nTracecode: 629322841\r\nVary: Accept-Encoding\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291760,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65012)","md5":"5b4238ce102b5db67e07c39791a9dcbc","sha1":"57bf2b215b18f06beffa3e2412bd60fc79dbd486","sha256":"f9f0f73c030b3e43cbd61101f797b5955272b451223f91e43b7277fc4f10fc2f","sha512":"e8f6abd984532d66290610e3da60f1856c4cdfe1d7eabe56c6066c908d36ad3ee598e5a0bbb378e500018e76ab49b2c1471478e4bfb427b245ee9c2c5f763dfc","ssdeep":"3072:z4OBppsQvfDRXSk/LRKcYDRuJ7UbIjy6z/kUZZ:EoppsQHFZFKcIRIgbIjy6YUT","tlshash":"59544b89f6d1b0b102e764d0416f560bb27a7525b00a85d8f679e4e19ebc8cea137f3c","first_seen":"2025-10-15T16:36:18.034044Z","last_seen":"2026-05-22T16:37:37.518352Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":4032,"timings":{"blocked":1432,"dns":647,"connect":255,"send":0,"wait":358,"receive":810,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/css/common_top.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/css/common_top.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Dec 2025 12:52:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6936ca16-3f5d7\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259543,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18411)","md5":"923e2b5075dfa0f1b2bd43d524c95152","sha1":"df2a38a59319f8e62c7d44103d9350487ac6d77f","sha256":"639980379d6e8857f6b5b3589239f7377edc0677fedbd62f38e9c0ccc1d00539","sha512":"72259f5e7662706cf4ab392a8ecac7b96243eb0a815fcd0623a51a84c063385e8533f6ae81c649b24fc59a0e816a9fa3eb69aa702b3020af9e899ef72d5c0b31","ssdeep":"3072:21AbeZcNhiQBa0UjkhO7PkKn7FSPuV/5+:21AbeCS+","tlshash":"8244d093fad520d891668eb2c1537bbff97e58825346aef3a7063b3587095d3493002b","first_seen":"2026-01-14T15:12:30.71961Z","last_seen":"2026-01-14T15:12:30.71961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/mall.init.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/mall.init.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 10:01:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6952518d-3dc8\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d56bd993598ae513b7808cdf9eea721c","sha1":"e0a37be52cd8090a779556c83fe5c43f611c5ef4","sha256":"c80d2c63d292196eebc982ae2dc8c533bff230cdef5dc6ef77be21145c77e275","sha512":"ab80d7a072ab29102c2e961b665d029945b1787f9983b92c7822546674b3b70ce087ffb34bfd9158a5772af4832324953721af57a599068ed514513652cd87f6","ssdeep":"192:WmkKPlkLAexr7dTer5aeDwSxwhaW6wYfashAPyxYqasX3/shAkMn3y/g8tHgIpCL:WmBk0ep7dT0tCin/WDJlNL1He","tlshash":"d4628628bdfb1052a973e06a47bf3084f29899076409dc05fd6f17885f84908f5bebda","first_seen":"2026-01-14T15:12:30.720979Z","last_seen":"2026-01-14T15:12:30.720979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon07.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon07.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1580\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-62c\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"271048df475e214a72dae3aa2b2cd5b5","sha1":"7470cc0fcae32b83c53cd7c500238cb433c475ee","sha256":"19dae5a8b265f27878d67f2ca770a20490fc067b78089c5ec8c7a1d16792a5a7","sha512":"a479747867c155dc2c72621d4f2949439ebee2ca4197162d0149e71eaefd5f75d57bd9c71123e14afbaf67d8f35549d14a1249447819b37fdb950595b0ff9664","ssdeep":"","tlshash":"0e31eacf629818148fbb2c63358424849a078d249f2396aad492b42d8aeda9821c7685","first_seen":"2026-01-14T15:12:30.722091Z","last_seen":"2026-01-14T15:12:30.722091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3827,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon13.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon13.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1665\r\nlast-modified: Tue, 16 Aug 2022 05:39:28 GMT\r\netag: \"62fb2d90-681\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1d15057b49b7b7f21b9a75b21ada91fc","sha1":"3e975dc592cecb7d8604e616cdec034eaabe5421","sha256":"4d44fb58359c77dc08455069a164137b79ad34b486f7a5310c81dec61dddd2a0","sha512":"c461fa473a2112de4a35269f8e756110aa68eeab6115e01ec53cf654e98efb6f1c87b618cf2d28d8387198673748d538f8340a7b81b4594687cbd9df0e5010d4","ssdeep":"","tlshash":"3531f807fa260c3d36234ba6be31440a9db3a35c5579e3b140a9a88735b7f0c0ae5903","first_seen":"2026-01-14T15:12:30.723222Z","last_seen":"2026-01-14T15:12:30.723222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3823,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon11.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon11.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1219\r\nlast-modified: Tue, 16 Aug 2022 05:39:26 GMT\r\netag: \"62fb2d8e-4c3\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"8a0f2a6cac1459f0ce4945540f3fa31f","sha1":"e932df98c54243ce35cd16580af9f672565da807","sha256":"91a907b1707dbee1312b41d756de7ad444c4e65737de34e8b8d32e9e2c7762e0","sha512":"6b3dc2b6fff14d501e7a60634dbb1f0e61dc8063b788a5d18d32cc5ec134447f029f002012907fa3ab3f60e17d2116359acfe3252b9176384ff2b6cc4a883519","ssdeep":"","tlshash":"1d21b7c3294481b0823d67b426d164359c7b24254d2a8b39f3e231b3e4b0a4d63f9143","first_seen":"2026-01-14T15:12:30.724379Z","last_seen":"2026-01-14T15:12:30.724379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3825,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/fastclick.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/fastclick.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 14:58:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69305000-1e7a\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7799), with no line terminators","md5":"a0fc6c24d1f3ff9ac281887c92b24acd","sha1":"2cae0f5a6c5d6f3cb993015e6863f9483fc4de18","sha256":"b7a4abaaf4d098aa06822e4b3a5d00532fa5051b48bc427efbea4b02c7c08d6b","sha512":"a87f91e982f8ff8d22888ae737968d675b047846a5340767ccff637ecc453c1748b254e4c1475d9126b38d55a12777ffdd8dba405e9aaa5d317a77ae570d21fd","ssdeep":"192:BUsv0Wo2Go2VCa3nNCvprG3rIl0yRU5i2:Wc0Wo1oXa3ovIbU0yRU5i2","tlshash":"fdf1858b36d7257202e7a34da2868706737b91cfd509045cb431dce12d7cea662e2bb9","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-08-13T01:51:01.649195Z","times_seen":1422,"resource_available":true,"data":null}},"time_used":2015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2015,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/MallRequest.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/MallRequest.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Dec 2025 15:56:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693ede1b-cd2\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2ebace329b79abdd1d96a25973d123a5","sha1":"99b88efe9244ad7dae94285b49f655d12f987cf7","sha256":"8336d67fa6a5f9991e233cb96773bdda68c8a97bebee84174c69f22bf95455b5","sha512":"11f8a1833343356d23da5bef8472967107623031346013f6474a7cd7d616bbc856d69c8804250840dc3421e9d133912d89a8898cc5811aa2810c8abaab4a7e58","ssdeep":"","tlshash":"d961518756bba04348f662a5875e5590e86399633350c411343e6b8c2ffae1c92f7ff8","first_seen":"2026-01-14T15:12:30.726482Z","last_seen":"2026-01-14T15:12:30.726482Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2011,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/image/ljhyico4.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/image/ljhyico4.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 7403\r\nlast-modified: Tue, 16 Aug 2022 08:19:46 GMT\r\netag: \"62fb5322-1ceb\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 80, 8-bit/color RGBA, non-interlaced","md5":"8b8d7fc9fe2a456d24b3cfe5e4a1de19","sha1":"cb4f0e34aa23069a0b115c05ef37aec1ef6af3bd","sha256":"3fb1a9d969dde2bcbe786c76405e237a31396431abfc7df34184de20fa26a99a","sha512":"460e4403628aa46c72a0327e624f5821019ee295f1bd5df2dc38781ea1370d551c5be8574b57f146868dd0dd575bf60cb99454a2bf639c2ba7c7863ca3f4f9c8","ssdeep":"192:TBXDBZedKlBBWFWelb0plfBY7DDG4SQAuZ0cXAIp0M:1XDBZ2RJI3fc4c0clp0M","tlshash":"08e1af9b45153804d6cea72fdc7b406aa8f61018b183e15db2716a72a1352461edfbc7","first_seen":"2026-01-14T15:12:30.727516Z","last_seen":"2026-01-14T15:12:30.727516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3832,"receive":1153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon14.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon14.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1219\r\nlast-modified: Tue, 16 Aug 2022 05:39:28 GMT\r\netag: \"62fb2d90-4c3\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"8a0f2a6cac1459f0ce4945540f3fa31f","sha1":"e932df98c54243ce35cd16580af9f672565da807","sha256":"91a907b1707dbee1312b41d756de7ad444c4e65737de34e8b8d32e9e2c7762e0","sha512":"6b3dc2b6fff14d501e7a60634dbb1f0e61dc8063b788a5d18d32cc5ec134447f029f002012907fa3ab3f60e17d2116359acfe3252b9176384ff2b6cc4a883519","ssdeep":"","tlshash":"1d21b7c3294481b0823d67b426d164359c7b24254d2a8b39f3e231b3e4b0a4d63f9143","first_seen":"2026-01-14T15:12:30.724379Z","last_seen":"2026-01-14T15:12:30.724379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3822,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/buy.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/buy.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 08 Jan 2026 02:16:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f1381-192ef\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (480)","md5":"684701553dd2cb304f778b6d448f498a","sha1":"41de244f138ef09e6ee1b830720d93467468f23b","sha256":"de111ad0fbd60c93c45e65bb33d7f595b74ff3e546472749571322937a17f5b3","sha512":"be391c229383004310934ae717a4f40597f81d50f2a504796f6727a0ae13d41c6e9fbd87b42ec2c6817ce989a5412a1e8f8beb28062a6768e4a7e41fe65d7718","ssdeep":"1536:B9BSKO+emfx6YsL2sdsY4Ql+Wrh6wZW+jwoUv1wMFMDz3NQFE/ThGeTM80/D1E:B9BSKO+eax6YsO5wZtUFeq1E","tlshash":"b7a3a55cf9a344d668b3206a5f6f2000ba59945b9708cc10fd6f6be01fc1f18e997be6","first_seen":"2026-01-14T15:12:30.728983Z","last_seen":"2026-01-14T15:12:30.728983Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2007,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/count.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/js/count.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Aug 2022 05:39:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62fb2d7c-ed2\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3794,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3038)","md5":"4eab5909f9376e55048a29e48d71d9b1","sha1":"609fbab711d52a19d88d6f6a326ad2d54cf1dd83","sha256":"887a9def68fceff5afb0102612fb8b4a57634341ba45d76a76ebbbfa72cf47d6","sha512":"d91a23e9768a2380cf541c35ecf05477b8b153fec89dbd779762b750e0dd7aafeee6e4968f137bcac0929b803c0dfa8864e1013e66f79cf2b70d66ceb6ae927c","ssdeep":"","tlshash":"f87134ca7a7325235f9b23e3266b0305f43144b0bc094d7895bd52e66e2341b83877b8","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-23T01:12:09.453589Z","times_seen":239,"resource_available":true,"data":null}},"time_used":2002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2002,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/image/ljhyico3.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/image/ljhyico3.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2894\r\nlast-modified: Tue, 16 Aug 2022 08:17:54 GMT\r\netag: \"62fb52b2-b4e\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 40, 8-bit/color RGBA, non-interlaced","md5":"5b62eadf4088292d5772ca6a5469092a","sha1":"d02fe97abf245cd335a5ca527034c436c4f8aaa8","sha256":"13f8b337622ef1f3129e3b5da02ba7fb0df318171f183522ea6d6bd2deb7bf67","sha512":"f8f1d85f32f7966d2cdbcb8fc3e1e9e2b4212e404ed646f57b31cd483224daa2fd4e8af9aeef726ba5c28a8a690c891f795e1ed4f28e20c37fca6533eaf9ba1e","ssdeep":"","tlshash":"6c514b0ca071523fd962ef76ac06f6e444f3c1638ab4c1d3203ea5742a6c209bc4e39b","first_seen":"2026-01-14T15:12:30.730628Z","last_seen":"2026-01-14T15:12:30.730628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3835,"receive":923,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aff-im.bj.bcebos.com/onlineEnv/imsdk/assets/pcIcon5.png","fqdn":"aff-im.bj.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"103.235.47.176","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bj.bcebos.com","organization":"BeiJing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 24 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:52:29:A6:04:F3:08:89:4D:35:11:08:A6:C3:B3:08:3D:F5:68:96","sha256":"BA:07:9E:17:4E:9E:1F:0A:86:77:26:5C:8B:C7:01:24:DE:13:3A:AC:9F:A6:B9:77:AA:31:62:C1:92:E5:F6:0E"}}},"request":{"raw":"GET /onlineEnv/imsdk/assets/pcIcon5.png HTTP/1.1\r\nHost: aff-im.bj.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 15:11:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 18440\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-MD5: fKJqXdckxsNrTUxJ9lkCHQ==\r\nETag: \"7ca26a5dd724c6c36b4d4c49f659021d\"\r\nExpires: Sat, 17 Jan 2026 15:11:56 GMT\r\nLast-Modified: Fri, 08 Dec 2023 03:18:26 GMT\r\nServer: BceBos\r\nx-bce-content-crc32: 1733739494\r\nx-bce-debug-id: sxlDV7Fm7mf2sN/ehxmuADXHXle16QT8CnRJQWhKK7D4LIudMaJP0LN56Nc5N+ik4y3E4uT4IYda++gANuahQg==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: 0582ed2e-ddc2-444e-aee8-eb90853cac20\r\nx-bce-storage-class: STANDARD\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 96, 8-bit/color RGBA, non-interlaced","md5":"7ca26a5dd724c6c36b4d4c49f659021d","sha1":"50d6a61dc1b00007852b69dcbe58ac3bf21da39d","sha256":"54beab86b57bf43b9605cea421d09e768d2377aa9edb55a26dd0267667ae9dbb","sha512":"e4ac9d4a82e9c22b04e3e9f76d6d2426e188ddadc9eba6749ba78c58e94bfd6198a91183125dc9da8b1082d5df8cb65a084c2a7e0bbc44908bc9e504ef69ebd4","ssdeep":"384:DwceDztIu06w3Nx9xZmKjougYgrmb5S+mXlRtwaMFXJZJ:y68QNeKTgBrmsXNwaMxfJ","tlshash":"8082d0cd8a3d7d3c8b3c8d3c2a275c8370619bd8c26de47a40dcc5722d4965aa26b960","first_seen":"2023-05-05T09:08:28Z","last_seen":"2026-05-20T07:39:01.161851Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":4076,"timings":{"blocked":1737,"dns":935,"connect":260,"send":0,"wait":316,"receive":282,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/respond.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/js/respond.min.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Aug 2022 05:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62fb2d6c-1119\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4377,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4204)","md5":"afc1984a3d17110449dc90cf22de0c27","sha1":"b5aba40d65b0d6f85859db47f757ea971a0efd30","sha256":"83a8807ef669fa70d0d9375347f5552897f76c6ae8e2e6f97ef592595462d8d1","sha512":"a9656fade32e1fd8b40ebba070eb627f176d6550412f45fbe6bf58c1e5ec7421ed5d489d95cb70ecd5e0e4a54fdc84cfb6a6764b9ef9034c0592f812d9a9ea48","ssdeep":"96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam","tlshash":"0d91d8d923243458b3a735695a7e8529fc33aca675184880d425d8bc3da4fec10bbeb7","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-08-13T00:50:57.670615Z","times_seen":1265,"resource_available":true,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/kefu/css/style.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/kefu/css/style.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Aug 2022 05:50:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ff24be-1832\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6194,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"764783dfb6a556e6f6edfb373083278a","sha1":"e899b054ce04fbf7137413693ec48c6fc65bb126","sha256":"68682b0334ea3e8ea57081081374f195b5232002ef0bc3592c38099c20c6f57b","sha512":"6feb1b5578c5b6e7a4094524d899500a6f2b021f41e0896dc600bbcbbca40fec878d5dd1e546b95ff1c9ce62c7e2b20ba60acc125edbf8c189e514072208c7cb","ssdeep":"192:Q7QNNGF2DUnpwpYbKUl4P9/O1S1OuSSk2EO9OlVvBPt0RmuPHRPBsWp:Q7mNxDUpwpYbKUl4P9/O1S1OuSSk2EOZ","tlshash":"15d14315b28a500ff13fb091fd731665667ec026f732876ea57ba5219eca08a037e6d0","first_seen":"2026-01-14T15:12:30.732823Z","last_seen":"2026-01-14T15:12:30.732823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=3116B4A1752284C5\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=327104842\u0026si=4f421a52fc369327eff75f8708b708a7\u0026v=1.3.2\u0026lv=1\u0026sn=7068\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fteams-meeting.com%2F\u0026tt=Microsoft%20Teams_%E5%85%8D%E8%B4%B9Teams_Teams%E8%A7%86%E9%A2%91%E4%BC%9A%E8%AE%AE-%E7%BD%91%E7%BB%9C%E4%BC%9A%E8%AE%AE%E4%B8%8E%E8%BF%9C%E7%A8%8B%E5%8A%9E%E5%85%AC","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:48.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=3116B4A1752284C5\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=327104842\u0026si=4f421a52fc369327eff75f8708b708a7\u0026v=1.3.2\u0026lv=1\u0026sn=7068\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fteams-meeting.com%2F\u0026tt=Microsoft%20Teams_%E5%85%8D%E8%B4%B9Teams_Teams%E8%A7%86%E9%A2%91%E4%BC%9A%E8%AE%AE-%E7%BD%91%E7%BB%9C%E4%BC%9A%E8%AE%AE%E4%B8%8E%E8%BF%9C%E7%A8%8B%E5%8A%9E%E5%85%AC HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 14 Jan 2026 15:11:48 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F6599E9624336984; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-13T07:52:14.509682Z","times_seen":376686,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aifanfan.baidu.com/chat/static/voice/msg.wav","fqdn":"aifanfan.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"157.148.69.59","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /chat/static/voice/msg.wav HTTP/1.1\r\nHost: aifanfan.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nContent-Length: 123650\r\nContent-Md5: HkuMFGH4dl1XcW4Si/LIBw==\r\nContent-Range: bytes 0-123649/123650\r\nContent-Type: audio/x-wav\r\nDate: Wed, 14 Jan 2026 15:11:56 GMT\r\nEtag: \"1e4b8c1461f8765d57716e128bf2c807\"\r\nExpires: Sat, 17 Jan 2026 15:11:56 GMT\r\nLast-Modified: Wed, 24 Sep 2025 11:39:13 GMT\r\nServer: aff/1.0\r\nX-Bce-Content-Crc32: 2058397378\r\nX-Bce-Debug-Id: O86QWRN34ehZQpTRoJMcyH7gORZBSC1b9XteUjmS5Q90iMwk5D47n2H7r2cPZlxOJ3iiPz/smeiTJvZd38I+Bw==\r\nX-Bce-Flow-Control-Type: -1\r\nX-Bce-Is-Transition: false\r\nX-Bce-Request-Id: 95320b7a-cf4a-44f4-b8f5-13e8f9cee6a1\r\nX-Bce-Storage-Class: STANDARD\r\nX-Product-Id: 1.0\r\nX-Request-Id: 8344712344285013656\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":123650,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz","md5":"1e4b8c1461f8765d57716e128bf2c807","sha1":"cd7b0d142fd4acd8846b6ab0e719ff2371eeb7f2","sha256":"533d781b104b715a7a11588f12f12109d8515a2ca751194c55f92e79a7308420","sha512":"9ca4add94156a4af0edb1fc2567feaf853458531b96354ef2f5d592a32df8f65f8506760832a356a2ffd05493d6105c53dbc1423c50cdaade878f0fa671af711","ssdeep":"3072:qycrEswIQxoo8TH6b7b+F9g/vbQA1ypcBLH9epRE6c+:+4Lx/8OmqTQAL9exc+","tlshash":"3bc3ab427352d806c44da67b6e85cbea6b31f89adf06935335d5af3fae793c10c82244","first_seen":"2023-04-07T00:21:24Z","last_seen":"2026-05-22T16:37:37.484634Z","times_seen":2433,"resource_available":false,"data":null}},"time_used":2435,"timings":{"blocked":0,"dns":613,"connect":276,"send":0,"wait":387,"receive":591,"ssl":568},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/commons.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/js/commons.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Aug 2022 08:31:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"630884ee-2c63\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (399)","md5":"27657cb3ba00bc14261f8b389e4b960a","sha1":"489fee96de1306552f1d4d8f2038dcf80cd35719","sha256":"4e1e28ab0eac0c8ea0d9d914102909b4e1a9d9e27987620ee843ac10e7cc1724","sha512":"4096d0961cfb38241c05ff6a627932cb4b3048bf697c4136f0b1c06b475d35b8e7a140c4d5e2c887b08831166bc5db135b57af8884a96f5cdf669d3bfadd2af1","ssdeep":"192:zMdvlZnatIYU5vG69CGs2JWqUHP4w/H4Nj3xgN8v9iza:wOGTwgNj3Sk9im","tlshash":"4432c844f6a81168207b727a1b7b1589b23a056799418c00f93c55f03fe0f3e56aff97","first_seen":"2026-01-14T15:12:30.735153Z","last_seen":"2026-01-14T15:12:30.735153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.base64.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/jquery.base64.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 14:58:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69305000-123f\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"45ad7480ebe1377d3b32bae529c60899","sha1":"80469d9ce44c69b11e6c0cc11bb6945a6ad9c9a4","sha256":"9b4f8c17d9d4526f4f7540508b733c40a1405e2ec9903c81d44d7f3f3631eb6b","sha512":"bb607a2dcbd1db26dd9acd8d89b2827794605ab4723b85063f02ccc4ef0f313b669a52cd237e34aac54b576926a262ded8983e7229befcfdfb92fd18f842cf42","ssdeep":"96:y+veaO7wyO7VUtro9mLp/iZZe8naRhIMRnRf2MTEcKFrzkite0G0:zvs7jO39mkHe++IK2MTYMite0G0","tlshash":"c5a164593dc324d51ab335291befa489f83e66034a5ce481fd2e27e84f6547484f9f88","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-06-08T22:33:07.896233Z","times_seen":49,"resource_available":true,"data":null}},"time_used":2014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/image/ljhyico1.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/image/ljhyico1.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6948\r\nlast-modified: Tue, 16 Aug 2022 07:57:00 GMT\r\netag: \"62fb4dcc-1b24\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 80, 8-bit/color RGBA, non-interlaced","md5":"bff677169f8caa8ee86ae97c4a230d0a","sha1":"ad6078f3c86cd3e36b3d1d01630f49edf5b7a3bc","sha256":"db5e98e9447fa2d6e766565382e7ad33b1abb2ea8f17740478b8450cbad0dfa6","sha512":"3be19a3df2c7eb1fc7d7d22e5ef4bb62b2ad8b77f3548eb93d45f57db3f530abf0e45d2bd0977fcb557fc098bc0bc135df8d21dac875efb249ffc01093a3d0d6","ssdeep":"96:GvYsoApVrxWqzFUKn515P38qrEL+gosQFyI4J1FkLx8fBZDGcHIyB+i+fJF0ToP:GvDJEiCE38qYa2/J3NfBJGPMx+kToP","tlshash":"0be18e2fef91b78941ba0db56419b9059a91070003864d3e4799f879f87e60ecb5f788","first_seen":"2026-01-14T15:12:30.736755Z","last_seen":"2026-01-14T15:12:30.736755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3837,"receive":923,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/jquery.glide.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/js/jquery.glide.min.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Aug 2022 05:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62fb2d6c-1301\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4865), with no line terminators","md5":"be22eef9490c48828a12158712899b54","sha1":"6cff622b17e4ccf7fcca19725d897e01317d93f2","sha256":"9e113e42e67467928c6619044d9feb529909c0e3c20366af009fbb43ef01dd41","sha512":"08a8bca1f29a5a7364bbe891a2d01726cda9840bdc6dc60534f956f7346052639ad1592681c55044fc9f5aefc3058afe89cee6fda51aa1efad8cae40ad566a0e","ssdeep":"96:HX0lW4Aef3NmFuRzfghK8pjenV6kxVu3N4HcbuT+RTW:ElXAefdmFuz0K8pjentJHS0+RTW","tlshash":"a2a1651567a83325c1d331f9016b9e4cd37793358203828e71a799c2196ea085b9ffad","first_seen":"2023-07-03T08:30:02Z","last_seen":"2026-07-16T18:47:16.025246Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/image/ljhyico2.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/image/ljhyico2.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 7710\r\nlast-modified: Tue, 16 Aug 2022 08:16:00 GMT\r\netag: \"62fb5240-1e1e\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced","md5":"f675d2b2075f1f1b5a7a2e46ddca6924","sha1":"ee68f2d0051a25dd0f1600f9d143c205ddaaebca","sha256":"2055055de3b5de7c45023448d777469e1b7aa54cfbbb0a97dc847610257fb5bc","sha512":"e02e359768891183975fc3067c74423519f1c78d98dc7955c11dc1ace927b12548712c4143fec63e174f780c750d4124f0ee4f0aca8838d68a50538220b4d510","ssdeep":"96:U6vbuscfUycM715YwJ7XgdViMksfIWUYvAwWRn7wLqhhP5xESFlViihADDQTH+Ab:UWb/83x0iOzUYoaLmP52yf6uiu+MN","tlshash":"67f1afae45d676969aff0e1b6a7612d1de82cf2c053c919d60340807fa79d1b084ba1d","first_seen":"2026-01-14T15:12:30.739518Z","last_seen":"2026-01-14T15:12:30.739518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3837,"receive":923,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banti.baidu.com/dr?_o=https%3A%2F%2Fteams-meeting.com","fqdn":"banti.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"163.177.18.27","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:56.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"POST /dr?_o=https%3A%2F%2Fteams-meeting.com HTTP/1.1\r\nHost: banti.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 8933\r\nOrigin: https://teams-meeting.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8933,"data":"{\"d\":\"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\",\"s\":\"420085170\",\"c\":\"lMtCebvRA97QAMtCealiWEOAAKYya2hwNmuiUDI=\",\"v\":\"2.0\",\"m\":\"q+1/rpXb6EOBs/glihvdg31lsxG3U9Gg6nTmQ9mIFuiKRKZhOh0B/xhNCReHW9bUqk1skKH1Is7bWkp/rw2NoWB/GTtlErWmDFsmTpCYQn9gjUCygCayy3Cx0v8htZK+MYzAZ033aW323kv/gk2ylQ==_aa75d02d\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, DELETE\r\nAccess-Control-Allow-Origin: https://teams-meeting.com\r\nAccess-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type\r\nAccess-Control-Max-Age: 3600\r\nContent-Length: 555\r\nContent-Type: application/json; charset=utf-8\r\nDate: Wed, 14 Jan 2026 15:11:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":555,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0fb1d240dd125dd8b16af74fad869927","sha1":"c6a06ac7c00da3f9eb0a3c145339e4ecaca3ac36","sha256":"79dcc9f75987a934dc53536afb2e01262dd7c8171101d778e8c024ba3705e3a4","sha512":"ee7b9b50851629865c85113ff70d0abf2a47e1765244d118bcd2bc6f10a3797f619c0239c2281f05b3867a23e97a84bbba5e3b9d2a0bbffbcc809ed1b920202a","ssdeep":"","tlshash":"88f0e14618a49d2ae99342340742110cded429780ad1720ea69a4a69f8d4030780a9fb","first_seen":"2026-01-14T15:12:30.740638Z","last_seen":"2026-01-14T15:12:30.740638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3413,"timings":{"blocked":1476,"dns":617,"connect":281,"send":0,"wait":458,"receive":0,"ssl":578},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/report/log.gif?pstage=1\u0026stage=3\u0026logType=END\u0026fnName=logVisiterEnter\u0026t=1768403519561\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=1f396553-2b0c-4a72-9359-b714373d438d\u0026st=1768403514490\u0026et=1768403519561","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:59.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cps5/report/log.gif?pstage=1\u0026stage=3\u0026logType=END\u0026fnName=logVisiterEnter\u0026t=1768403519561\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=1f396553-2b0c-4a72-9359-b714373d438d\u0026st=1768403514490\u0026et=1768403519561 HTTP/1.1\r\nHost: affimvip.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: BD_CG_18377885=176840351448823617; BD_VEID=176840351448823617; BD_VET=39a21841acc4de50b1972477e93074de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:11:59 GMT\r\nserver: Apache\r\nx-envoy-decorator-operation: im-report.meg-crm-prod.svc.cluster.local:2333/*\r\nx-envoy-upstream-service-time: 0\r\nx-protected-by: OpenRASP 2.0\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/css/nav-2020.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/css/nav-2020.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Nov 2022 02:41:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6361d8db-1b4a\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (524), with CRLF line terminators","md5":"2db09a577886791517199be858fee8d1","sha1":"881de5136e1febd40a95f661ab4322d31c6f3aa9","sha256":"bd92c0e19210937c0e2001511ff1f25146244c6ee4e72d026aa45e28f8381c2f","sha512":"a504c9c22b7b4668b0c2ad3424e91968201ff394bfa4df33b3042e832479d33db1b2de036661e585b17d427d3ba173c5bc504b173cfc6d4c03c7afb98aebbbb2","ssdeep":"48:i73aeJkDO25Cgq+pLxT7TxZlBgHx15cZm/7hU38E4aTaAmNwLPQHpZoZLuh9pyTn:icrr75Y7hU38QQHpBGhy3qqXVap","tlshash":"c2e1bd6a5704624cb733d3ffd5f2efe82ba59101b242149cb6d23990c68e65905b3eca","first_seen":"2026-01-14T15:12:30.742413Z","last_seen":"2026-01-14T15:12:30.742413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/js/jquery.qrcode.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/js/jquery.qrcode.min.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Dec 2025 07:27:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692e94c8-37a8\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14248,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (552)","md5":"5d2a24b990bae5caf90e5945dba41c56","sha1":"553ddcb7dbeb38531296ab417d7eeab8cd267e57","sha256":"a00e6bdde608cc4e50995ca97564874ea22d2837023881a83cf56a37162480f9","sha512":"501d01adddccc0558b30157168ff82cf1e53f9f15bf5fe909baabc6c4dbbab5b9ae5d84f06c68cd4f4cab9e001d67ffa15ef560d9d92c43cba2e3ea4f641e551","ssdeep":"384:DbEMd9QIIAAVTRjjrlqwbHHfsgDZUnEbx4go:34Fb1w","tlshash":"e452c7d1f39141b7b1466cd8681f249e94a8a4a3ac15955cbfbcc0e2eb78fe15478f30","first_seen":"2026-01-14T15:12:30.743561Z","last_seen":"2026-01-14T15:12:30.743561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?4f421a52fc369327eff75f8708b708a7","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:44.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?4f421a52fc369327eff75f8708b708a7 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11304\r\nContent-Type: application/javascript\r\nDate: Wed, 14 Jan 2026 15:11:48 GMT\r\nEtag: 77deaaba84aedc6d496c90a8ea9011c9\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=3116B4A1752284C5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29910,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (634)","md5":"7a8f1ce2a4e15fc1ce4230720db91b09","sha1":"26e29add9ccbfe9e0597a5583f8a7318979c0a8b","sha256":"df0bb014b4d4967743716df58fa91d2d18b187bdc896b9c8fa8cfa6df4f60e2a","sha512":"63744a21bd7b54c3db30e3894b7784e262241a46c376cae10b05053befff5b5dafd7f0535f9463d609ef0e04eab6299c4ee38e031355beca5c71acf83378ae35","ssdeep":"384:i+JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:i+4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"f1d2d9a9b282713293a324a5153f324ef17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-01-14T15:12:30.744644Z","last_seen":"2026-01-14T15:12:30.744644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6318,"timings":{"blocked":3001,"dns":264,"connect":1524,"send":0,"wait":314,"receive":1,"ssl":1212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon02.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon02.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 635\r\nlast-modified: Tue, 16 Aug 2022 05:39:22 GMT\r\netag: \"62fb2d8a-27b\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 50, 8-bit/color RGBA, non-interlaced","md5":"07fd6b8683e821c3f94afddd81400c0c","sha1":"b24270d51a9f57c8f967f37d957f9cb1cdd7c3c6","sha256":"24c75ef190bad755fa8d0732f0c495e635e2fed3b0b1d8c7f54c2c4767f7ac94","sha512":"239785611ad902c1760187865de9d5b57a4388a34dea09658dda9f5d3bb056e0d9efcacbe22c91cff9c4ef7bbb9bc12f97f428742a5d8a82e49c2fdf2ac8a9f7","ssdeep":"","tlshash":"21f0b7e9a0f8ac10ece31112031ad554a2eb0e0be37230b1df617a38bf771588f14086","first_seen":"2026-01-14T15:12:30.745476Z","last_seen":"2026-01-14T15:12:30.745476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2011,"receive":2300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon10.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon10.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1173\r\nlast-modified: Tue, 16 Aug 2022 05:39:26 GMT\r\netag: \"62fb2d8e-495\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9c5b5a1cb8a54d2750fccdad045ab2cf","sha1":"c5dec56a516fc1ce32f55adf52be58ac5464ab46","sha256":"a773eb2772345df2b29d55238014b9778dbd2e541137b37da64ca2304f0e8d4f","sha512":"ab99c88e8444d443495eba7a16ea620099615f7f99a3349b194b4bf51c84e113280491e6c16208d579d04b635daf6521ca0d4425f578b8e0a4fa32b5a6f0698b","ssdeep":"","tlshash":"7621b4a06107a4b4b7752b9884a4c6b5ce3a81359697ecb5af00d9b19cd9a588c2cf12","first_seen":"2026-01-14T15:12:30.746294Z","last_seen":"2026-01-14T15:12:30.746294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3825,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon15.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon15.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1374\r\nlast-modified: Tue, 16 Aug 2022 05:39:30 GMT\r\netag: \"62fb2d92-55e\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d7756f059e3adf6fa4d3af02e022163c","sha1":"8a7e9239a60fb00d19ea910e6d1afde068c28fc9","sha256":"26fab271650eff66c8b1e32b71c9e132c7f20314960316864e6d2c8368783bcf","sha512":"0fdc86be0d6bd6b3104295dfffd3e5e54e793c123b9fcf4db6f10ef88c59e5d572e72cd34e99c019ee4433589f00382552bd707fbc0a301b76aec131928efa30","ssdeep":"","tlshash":"6f212e09f6729d3234c02e13425615f4f7570bfd744708528ecada223bb196500df347","first_seen":"2026-01-14T15:12:30.747155Z","last_seen":"2026-01-14T15:12:30.747155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3821,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/assets/js/cms.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/assets/js/cms.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 May 2025 06:01:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681af722-ab1f\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21799)","md5":"671ba2f4155c570c887eed45c02cd77c","sha1":"005035d2b4fac7e2db5213f636d346c5a2b44f45","sha256":"4af9070134c6bf5bab6ab1503f8ba24a40dbf361d425f17778ba19bee1cc81c2","sha512":"45e14ecde7dee590a34a2415b10de989ae8eb7ae3720fe65e3d3e77e42efba184d668fa6c4d913532e6b88732bacbddba478fd81bbb899b400b5f13c780fa89b","ssdeep":"768:621fBkVPoVLWyAK0lxZbf8ruqeai4qcIs6IKV6Tw2ChYJOKOrCi93i+WzDtAFfpn:HfnFlAXaOZrF9yLzSBpn","tlshash":"1f13f74db580356b22a75076801fb50b31716e24eb0b8514f223f1b96dbcd9aa273f6f","first_seen":"2025-05-29T22:31:05.289237Z","last_seen":"2026-08-01T14:03:56.847721Z","times_seen":19,"resource_available":true,"data":null}},"time_used":2016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2016,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon06.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon06.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 940\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-3ac\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"843def9101810da0c7b39c42d9b5e937","sha1":"8985fbe10ca651eee5be6a9716ad33b19e5af9bd","sha256":"99fdb32a2d7efcab50edae4e8d7bc5f1144accc578117674adad5ee9d7f38dc5","sha512":"1f721d69da46319b8a1f87c6433e097cb6b2e2934593b39b1208f72acc9191fb728dc0d1bd29e5b779a9333f8f0e74cd6e8723938e44e480bb3a382903cbfea8","ssdeep":"","tlshash":"0711844e035929b737e8372f565d23c0523b45bdc91830ec71cbda363e25d98148d121","first_seen":"2026-01-14T15:12:30.748483Z","last_seen":"2026-01-14T15:12:30.748483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3840,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon12.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon12.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 978\r\nlast-modified: Tue, 16 Aug 2022 05:39:26 GMT\r\netag: \"62fb2d8e-3d2\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"031d005bb476d503923a072fd2ce8cdf","sha1":"d6508c65f0b502daddcef27c8734f3da29b01802","sha256":"f213d8eb8bce297b1b77f79e05cf4841bb09e18fae51e5e8f6562a94a77e3a55","sha512":"64f51f56a7a8ec9ea2e92ab5ca818d9720d435a5170559658044468c2a11301514a04de341c26e5cd2feea0f027abf55059f19201f2e8e1215ca708004693815","ssdeep":"","tlshash":"3911a89df9745af94830ce802d281281df94028f8d00127ccf57e4a5d597a853aa9c06","first_seen":"2026-01-14T15:12:30.749388Z","last_seen":"2026-01-14T15:12:30.749388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3824,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon16.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon16.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1347\r\nlast-modified: Tue, 16 Aug 2022 05:39:30 GMT\r\netag: \"62fb2d92-543\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"bbdeb90481c92977b83aa553ebe2be3a","sha1":"1707703b3d4d6095726e273acee731cb940a0470","sha256":"be05dfef96cd4c61ec062b1457a2d22e4fcd3419cf3cf873524dc2a60d61178c","sha512":"b9b5b663a20813069a964cac44569513f04f9a4017a63f15ae1ae5a431e30cf6ca285075eeeaab725d975389cae9715fd70a3b92bc11b5194d490c03fcbdb4fa","ssdeep":"","tlshash":"8521b6d1db605a38ef7ab6c4aa35d07040c34ba54a517297ace95c68546e34cf8d4164","first_seen":"2026-01-14T15:12:30.750128Z","last_seen":"2026-01-14T15:12:30.750128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3821,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goutong.baidu.com/site/696/4f421a52fc369327eff75f8708b708a7/b.js?siteId=18377885","fqdn":"goutong.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"183.240.98.82","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:48.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /site/696/4f421a52fc369327eff75f8708b708a7/b.js?siteId=18377885 HTTP/1.1\r\nHost: goutong.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAlt-Svc: h3=\"quic-pqiao.baidu.com:443\"; ma=2592000, h3-29=\"quic-pqiao.baidu.com:443\"; ma=2592000\r\nCache-Control: no-cache\r\nConnection: keep-alive\r\nContent-Length: 6805\r\nContent-Type: text/javascript; charset=utf-8\r\nDate: Wed, 14 Jan 2026 15:11:49 GMT\r\nPragma: no-cache\r\nServer: Apache\r\nX-Envoy-Decorator-Operation: im-icon.meg-crm-prod.svc.cluster.local:2333/*\r\nX-Envoy-Upstream-Service-Time: 107\r\nX-Protected-By: OpenRASP 2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6039), with no line terminators","md5":"544fa3ea2778e6e31be524d09add1dc5","sha1":"01e3061487c687c7fb4a93072624b16928ba5b81","sha256":"2e181d58a7f7b509ed91b00f9ca3f39e0cbceb72c2859c815c0c3e83134c134f","sha512":"205ee0c0817fa877004ef58d8e82058bf5b522219a50ffe223f95c5f70308dcd7b1cb6472acabc910e9aed60bc1f8969c8c62b38d2a6c62c8f2b3acd86bb95d4","ssdeep":"192:PeTSPpAgOC5SRFwK/mtXAHaCYViC5HOZDY:7pp78RUOgZgDY","tlshash":"5fe1e7044aa889bcc78355e95c0b3d0b9c6eb215cf4c4f09eb9ac5687bc5dad1a03f4d","first_seen":"2026-01-14T15:12:30.750941Z","last_seen":"2026-01-14T15:12:30.750941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2676,"timings":{"blocked":1152,"dns":552,"connect":198,"send":0,"wait":370,"receive":1,"ssl":401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safe.cdn.bcebos.com/js/dfxaf3.js","fqdn":"safe.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"60.188.66.38","port":443,"asn":136190,"as":"JINHUA, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /js/dfxaf3.js HTTP/1.1\r\nHost: safe.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Wed, 14 Jan 2026 15:11:57 GMT\r\ncontent-type: text/javascript\r\nexpires: Mon, 12 Jan 2026 02:04:56 GMT\r\nlast-modified: Fri, 14 Nov 2025 02:04:12 GMT\r\netag: \"-4d4f99bbd1e402f7ff78749aa6b1c699\"\r\ncontent-encoding: gzip\r\nage: 479221\r\naccept-ranges: bytes\r\nx-bce-content-crc32: 2886860088\r\nx-bce-content-crc64ecma: 12640851051612225166\r\nx-bce-debug-id: loOvOz5o2KMFKcJt8uIc2D7WjXLX73FykbqYwqmS9Uf0MpafDlqTJ0PhF7RTAUjuxNoXRV+04XcRaT4icpCeUQ==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: f94d42ea-d75e-49bb-8ec8-eb1dd5d75d39\r\nx-bce-storage-class: MAZ_STANDARD\r\nohc-global-saved-time: Fri, 09 Jan 2026 02:04:56 GMT\r\nohc-cache-hit: jh2ct51 [2], czix51 [2]\r\nohc-file-size: 163389\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163389,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65382), with no line terminators","md5":"869f0ada2903e2c08dc7224c11e94f3b","sha1":"430d5cb207c82132810a912ec4d6a615c504d7c3","sha256":"4d947ccf8788d0734bd9158fd58d9ad8afc0e6ede1aeb4ed93a3d5bd950a79ac","sha512":"7c0d464c43c52e74f4ca62a2f3bdb88f9183fa6c9c8b4df06926b4bde5b209b9be81b7e8eca08738831496ccd3d5becdce2fc195b2173830d4f9f09da5199fca","ssdeep":"3072:riCbL4QriT9ZqNy4v9tCH3F4CzGaRxAGjXkKwgorhURyGdK7oorDdoGVWxWQumN2:rlbLviT90Tv9tG31zGfI1g9xKw5b","tlshash":"8df3a3cc7ec1787d075350b9072f201b716aee64684ee981d861cada3a78b8d8067f7d","first_seen":"2025-11-14T02:23:10.808796Z","last_seen":"2026-05-22T16:37:37.498055Z","times_seen":952,"resource_available":true,"data":null}},"time_used":4744,"timings":{"blocked":1986,"dns":1482,"connect":246,"send":0,"wait":771,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T15:11:41.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, max-age=0, no-cache\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\nset-cookie: server_name_session=c81a54c7e9c230fe04b09171974f3138; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"decimal.js","description":"","website":"https://mikemcl.github.io/decimal.js/","common_platform_enumeration":"","icon":"decimal.js.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57580,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363), with CRLF, LF line terminators","md5":"1794061e3f2cf48793d9d590cc90703e","sha1":"a33bc0ad74b0832dc9d33a5d240b51c4bf46b615","sha256":"f120ce068b7b300d3d9a33c90bc4026ef525c925d7c8d945f9ff8842f66feadb","sha512":"560df1bdb1439cc36d461fc8b5e9ef23f1758aaeaa432003dc3129e103260587e6d30c5b303436f0cee7e0db1d90efba2972e25bc666f3c8608178db7decfc13","ssdeep":"1536:a3Okn2I/23yKwOeyXsErLMkPI4BKSl6oDk:a3Ok2Iu3y68ErLMkI4BKSl6oDk","tlshash":"6d43702184c99933017395c19a705b4afeda8a37ca2b9651b7fe1b836ff3e45dd03209","first_seen":"2026-01-14T15:12:30.752687Z","last_seen":"2026-01-14T15:12:30.752687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3119,"timings":{"blocked":862,"dns":399,"connect":230,"send":0,"wait":1390,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/assets/layui/css/layui.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/assets/layui/css/layui.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 May 2025 06:01:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681af722-137bd\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79805,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"64c30d7816273e42e88b29fb9a57bb04","sha1":"f8e319df7cb112ce9403534f6f700b40f5825bb9","sha256":"c87711a7bab76cb22822ae91b1d6b9f980093071cd6672be35c27a705a968750","sha512":"8ca661e83be26f06637c95e5b03ffb3a325337d2188815190814cb37fd689d02ff8e063a0e2259016f6260d3c8e5fb368162f1125701fad2e88f2d71aea3323c","ssdeep":"768:s/nEWwcY/8zY5FRy6lDj1JpZlwyQaIYKsR3zdVhlu9Tr1BpRBnMHwY6Lp98RHznc:xWwcY/8e678BqMuiebr","tlshash":"3073a732e6012c657a2bd215b1dcbdbda0789512ea634e6df3523b1bc7808571073f6b","first_seen":"2026-01-14T15:12:30.753582Z","last_seen":"2026-06-30T04:32:36.639216Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2018,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon03.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon03.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 916\r\nlast-modified: Tue, 16 Aug 2022 05:39:22 GMT\r\netag: \"62fb2d8a-394\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 50, 8-bit/color RGBA, non-interlaced","md5":"313e926341e633c4a8fb820d971ad9f2","sha1":"dd0b6e3d16bf245312c4ac8949626baef25310e9","sha256":"b63b766c01f377ecd76fe67a8071ce9cb5ce000bbbbf54976b5ef12678efcff0","sha512":"ce7d416372961457901b53de0821b4a2a6d5e5dbb83899e297fed3a10aa522b69f569bf36013e05f09a90c64b9a1fed618aef16f612cb7c41b3f32b67e994775","ssdeep":"","tlshash":"f91167caab5116a954c6080f17370568665a6d937713faa8724eec73f5c50c1d854372","first_seen":"2026-01-14T15:12:30.754545Z","last_seen":"2026-01-14T15:12:30.754545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3843,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/report/log.gif?pstage=1\u0026stage=2\u0026logType=END\u0026fnName=logStatic\u0026t=1768403514487\u0026loginid=7282572\u0026s=18377885\u0026v=\u0026sid=\u0026dev=0\u0026lid=1c3c1c48-fa43-4e0a-b7e7-a2258395a415\u0026st=1768403509715\u0026et=1768403514487","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cps5/report/log.gif?pstage=1\u0026stage=2\u0026logType=END\u0026fnName=logStatic\u0026t=1768403514487\u0026loginid=7282572\u0026s=18377885\u0026v=\u0026sid=\u0026dev=0\u0026lid=1c3c1c48-fa43-4e0a-b7e7-a2258395a415\u0026st=1768403509715\u0026et=1768403514487 HTTP/1.1\r\nHost: affimvip.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:11:55 GMT\r\nserver: Apache\r\nx-envoy-decorator-operation: im-report.meg-crm-prod.svc.cluster.local:2333/*\r\nx-envoy-upstream-service-time: 0\r\nx-protected-by: OpenRASP 2.0\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":true,"data":null}},"time_used":2877,"timings":{"blocked":1297,"dns":494,"connect":263,"send":0,"wait":282,"receive":1,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/css/style-2020.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/css/style-2020.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Mar 2023 06:09:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6405837e-1e420\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123936,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (1508), with CRLF line terminators","md5":"f098e158dbeb916d32f1186eb2f9010f","sha1":"e81634976205b7b3b4264e0d46430670b0169061","sha256":"90e050c91de4e5a5f7a43a467a8114fb8a5705df3eed6219d093f593f0db6f6a","sha512":"4b2c350769be12242212ad086f36acc04cfb75c7bbeb0e0a761d4ec7d54fcaa0838b7ba7fc6863c985babfed3d0dd1a90a5faad1a24ac96ff33dc50930042ef7","ssdeep":"1536:X8F/VWgJRMfvRxfo6tLfD2/oJ0sEm1SDydKLV:X0VXWsIblJ0sEm1SQI","tlshash":"0fc387169561200ef02ba5b7b4676b8a6a2fa003f6134bbdf1b53861d5cf0d7123778b","first_seen":"2026-01-14T15:12:30.755305Z","last_seen":"2026-01-14T15:12:30.755305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/mallres/assets/css/buy.css","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /mallres/assets/css/buy.css HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Dec 2025 09:13:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d002d-177c1\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96193,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (310)","md5":"24e2b5b03406ba3acf2ababe995babc9","sha1":"d23973d56e25de95d3052c0ccb01d98ab22c574b","sha256":"123099ae5925b123fe0afe2f6053f5f03eb1e0e84cc9adae5214a334bdb81b96","sha512":"bee5b24e22808c445b51819ffaac779a605c0e83301939815b20cd7736dac4b9f5bd80c0742fc8b1ba60833cbf73837acb23ee1507efc3e43d450d3698b255c2","ssdeep":"1536:49TtpxNcXQZUjgQG7PkKn7FSP1UV/Ve1DuMqC1HQIAy8mIn2INJfX1:49TtpxX7PkKn7FSPuV/Kqu8mIn2INJfF","tlshash":"a49384518363304bf42f51a67f669b8a132bd083a107ca3d3dca3854cb4da9d6d72bd6","first_seen":"2026-01-14T15:12:30.756107Z","last_seen":"2026-01-14T15:12:30.756107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2017,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon08.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon08.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1442\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-5a2\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"11e4c28949915b775ad759c0dfa19aa0","sha1":"172212889457964c86253b880e71ea2236cd5988","sha256":"cbb6f34bce623122e84b0f005537c6412d1f0841398a2b55fecd0baf6f243752","sha512":"464c178c816953567ce95b47359cc796d5afaace475d7bac84ab0db6383834c31a264416d86ccaff9c14b9d564938b91cb30121b38f6dae2954d72f4312d0335","ssdeep":"","tlshash":"6b21ebddb0f7102d99d06545771a0967f17eb59619a046bc9b8b1c01da74f3c70461c5","first_seen":"2026-01-14T15:12:30.757039Z","last_seen":"2026-01-14T15:12:30.757039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3826,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon09.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon09.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1339\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-53b\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"4752727ab1ddd29ae1ff9109a0cacb6e","sha1":"7d7845f35409269defe6920644ce276083aca35a","sha256":"0d09fbb445f5f023f290bad09e6118019252b0581967e6943cf6945ea9ed40b1","sha512":"235bc350393224e7b6aa2ee6a6826f74f0e27e69a3f6449ad29ce1e562e2ab11b2e5113076c6eb7504d60e52694f16c382e68e141bf86c57f15500c6149232a5","ssdeep":"","tlshash":"9121a5ea54686c25f3468f37f5a88405e8720b515b0bab068cf8d525a5b3fcd42b46b8","first_seen":"2026-01-14T15:12:30.758007Z","last_seen":"2026-01-14T15:12:30.758007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3826,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiff.cdn.bcebos.com/sensors%2Fonline%2Fsa-sdk-javascript-1.26.2%2Fsensorsdata.min.js","fqdn":"aiff.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"111.20.254.35","port":443,"asn":140105,"as":"Shaanxi Mobile Communication Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:54.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /sensors%2Fonline%2Fsa-sdk-javascript-1.26.2%2Fsensorsdata.min.js HTTP/1.1\r\nHost: aiff.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:57 GMT\r\ncontent-type: text/javascript\r\nexpires: Fri, 16 Jan 2026 07:57:20 GMT\r\nlast-modified: Wed, 03 Jan 2024 08:13:21 GMT\r\netag: \"ea7dab9ebd3ba4d90202b17a796f36fb\"\r\ncontent-encoding: br\r\nage: 112477\r\naccept-ranges: bytes\r\ncontent-md5: 6n2rnr07pNkCArF6eW82+w==\r\nx-bce-content-crc32: 295589737\r\nx-bce-debug-id: ElnsrpgSuFqaRRh+Tbso8P3HSY8lurgDvANUkiq/CxjgeFZInNsGs5BRDOHlAle0CBH8pik5s6HIhsAO5QSetg==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: df5f2ccc-56bc-4a7d-9f01-bd7a494ef577\r\nx-bce-storage-class: STANDARD\r\nohc-cache-hit: xacmcache57 [2], czix234 [2]\r\nohc-file-size: 183695\r\nohc-global-saved-time: Tue, 13 Jan 2026 07:57:20 GMT\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183695,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33624)","md5":"ea7dab9ebd3ba4d90202b17a796f36fb","sha1":"770f1a5958c42e69717f97a8c23db31c1374a7cc","sha256":"321c6d6698415176d76e0e1e5ab6d6b9928467d9f1f882da76cf51c8039a8605","sha512":"6a1e23959d1efcd45ce5861b06783c7b102e0fcb5dbe92e48c577865d7fc7df2fe598d8fd0db05fe10915ca45cc551c79c5ec40f0936938e66ebaa4b5ecf392d","ssdeep":"3072:t1x8322hli+/kSWADCmC5Xcz3vLtE2cHCrg0Vvy2AiM1g4JXfg:F832Z+/kSWADCm2Xcz3vLtE2cHsVIlK","tlshash":"76040acdb2d2b43746f73138a46f110ab23eaa58680e8164f275e4d53d78d09932bf6d","first_seen":"2024-01-21T00:33:09Z","last_seen":"2026-08-12T15:09:02.998971Z","times_seen":2516,"resource_available":true,"data":null}},"time_used":5391,"timings":{"blocked":2559,"dns":1828,"connect":487,"send":0,"wait":270,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"aiff.cdn.bcebos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/report/log.gif?pstage=1\u0026stage=5\u0026logType=END\u0026fnName=logVisiterEnterHTJ\u0026t=1768403518888\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=570d9e3c-98b4-4c6b-8d95-5e569a5f260d\u0026st=1768403514490\u0026et=1768403518888","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:58.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cps5/report/log.gif?pstage=1\u0026stage=5\u0026logType=END\u0026fnName=logVisiterEnterHTJ\u0026t=1768403518888\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=570d9e3c-98b4-4c6b-8d95-5e569a5f260d\u0026st=1768403514490\u0026et=1768403518888 HTTP/1.1\r\nHost: affimvip.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:11:59 GMT\r\nserver: Apache\r\nx-envoy-decorator-operation: im-report.meg-crm-prod.svc.cluster.local:2333/*\r\nx-envoy-upstream-service-time: 1\r\nx-protected-by: OpenRASP 2.0\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/js/jquery.min.js","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:43.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/js/jquery.min.js HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Aug 2022 05:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62fb2d6c-1727b\"\r\nexpires: Thu, 15 Jan 2026 03:11:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators","md5":"a13f7f208ba534681deadb1ec7a2e54a","sha1":"3f51e2eecfa88c61e1200a48ed14f2cdda98ed87","sha256":"d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220","sha512":"63535b5944b535a8d3343ae691c15a5cd1211f1fb071ae3a8ea076eb12492c827ba18f6253a353c9341ab329d90a6accde473ab989f4614bb34ebf43ccf11765","ssdeep":"1536:lYRKUfAjtledhTmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:cUb6GvCD0932o2skAieW","tlshash":"5c93e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:34:33Z","last_seen":"2026-08-12T02:51:06.956818Z","times_seen":1598,"resource_available":true,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/assets/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:48.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/assets/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 May 2025 06:01:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681af722-38a2\"\r\nexpires: Thu, 15 Jan 2026 03:11:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14498,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13621), with CRLF line terminators","md5":"95b61ed8fb7c08b1ee361f0572a899c4","sha1":"f8de7c6741d2b96a3a9a0cbb3d8c0b93db6ce6fa","sha256":"66fd5c786e3a5abccd8d3bc269efd75a0b7d9b8a1253a8af4d7944f78bd82bb2","sha512":"019841bd99063133466683655e295c97722d6433faa14b259feceefa4dad60d6e1defc646d172f2abeb05c2b2b7432d9156f96a10eee226276e9e05953793c18","ssdeep":"96:hLp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyP8L/LztJnzyv2O67KGx1jyd2/Sy:eWmLr2OtSszztg2O67KGx1jCWR2b+RcU","tlshash":"7c5230e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-06-05T11:37:51Z","last_seen":"2026-07-27T10:52:35.210652Z","times_seen":125,"resource_available":false,"data":null}},"time_used":2054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2054,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sofire.baidu.com/h5/t/1000","fqdn":"sofire.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"36.110.192.107","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:57.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sofire.baidu.com","organization":"BeiJing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E7:8E:E6:62:8E:D6:EC:1C:8A:20:ED:37:08:BA:B9:C9:36:3F:14:BE","sha256":"66:43:23:EA:F3:CC:95:F8:0B:75:0D:15:AF:2F:FA:BB:48:E5:8E:2D:98:0D:D3:0C:3B:8A:3F:08:E3:C4:D3:00"}}},"request":{"raw":"POST /h5/t/1000 HTTP/1.1\r\nHost: sofire.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: text/plain\r\nContent-Length: 3838\r\nOrigin: https://teams-meeting.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3838,"data":"CODED--v20ezLvhHO=QsO\u003eZwu?]U_DaiyHf1c2h`h7dDK9MoK:Vsq;YQ[@]euDb-_.d\\dLe5;6aIT3gMS=T0C;fdT1s8C5nllGypO7h8lCbT:lPHPrQszBUwOx_z\\X],;.elcQe5cFOED7QYG.VLS,UwWx_z[9a-+\u003c+]_@i5o6LDK+Moupb`\u003e-bc[0jhF*`X_Ga172rO8BM)KlPHO8QsytYPW0Y)k*c,_=a0?2jDgUInXxP[\\[Qr/t[PWEY)W*`X_La172i5o6LDK)QHO=QuLP^vPfqhhFnm_8iK0B,OO9IGDHVnH^i``\u003efeW0aCz:vGG5*pJ0qbpfIG\\s^]jskr0Ymd\\6rD`7n1g,jpl7vp`pRF[jZrrsl;`2XSr)i*41xXX.*p4\u003c.`O=bjDTVJ_pTLS1Y`WEY)W*`X_=e0cQe5_6LDK)Q,O=QsKtXPW5^T[I]-[.d\\cAjpgUIkGlPHO-VrSAUwSx\\T[9b\u003c_Ma2K?/88@bHGyRX:,QLrcmdCzrDv;]ZKla]_@h5_VIGfsfo_7W0L?Zw_FYY\\Ec-[?f\\N@gp`gZXPuf,\u003e.UMO0YQS4]dTZum`1r4SOhEcGND6zMn+pU]qt[vX,tYd8w=3;dLl5utOGLX3o^]Xwjvm.e?G1\\8[4]-[La172e4C6MkGlSoO7TLS2ZPWEYz[4]-_Ha172e4C6MkelSnO,Qr/tYwux_z\\Dv08:zL,\u003ee4C6MkmlSnP8jv,.n@r2Yz7*a=W.g0dL,8@Bb4fxMn+pU1Ot[vXwsYT4uld-*`4?,4WDZH[vYJXNQOd)fer)s-8Cnm,GdL\\4v4DpRF[jZrrsl;`2rPW0Y)_;]-3.jIKpe4C6NEClSnO,Qr/tZQSx_z[*`X_Ge0cQe5_FMUG6QIW-UMK0YQO4]US8aYW\u003ce][@ia_DMECzQIG,UMK0YQO4]US8aYW\u003ce][@ia_DMECzQIG,WM[0Ydh*_US8aYW\u003ce][@ia_DMECzQIG,UMK0YQO4]US8aYW\u003ce][@ia_DMECzQIG,UMK0YQO4]US8aYW\u003ce\\c\u003ce5oGIkqlRImpTLS;ZPWEY)W*`X_GflcQe5cRNki3QIS8U]m\u003c[Q[x\\T[Cb,_Ma1[\u003ci`g@IkS6MoupU\\/1XQSx\\T[CcX_Ma2,5uO@CLEKzQYG,U]K1XP30dhKIul\u003c8ql@jvupGY3Hz^X,_i`\u003e3Yv37^87*`X_He\\cQe9p9YX3+P\\7sba\\)nzq2iCK5],;.fm_2k4g6LDK4QnO=QsO2[QPC]eS:bX_8a1oCe5;6IjylRYWpWrTBr`W0Y)gD]-3.e\\?@ha_6LDK4RnO=QsKtXPW@^8[I]-[8el?Ahac@MTyzMn+pV]qt[vW0Yz7*b-W.g0c@e4C6NkGlSnO,Qr/tZwWx_z[8],;.f1g2k4gDIjylRoWpWrStXPWA^d[I]-W.d\\cNi`gUIkKzQYm-UMK1YQO4]US8],;.fA_2k4gELEGvQH+,TMK,Y`35Yz7*b=g.g4t1,el9LDK6RXO=bvP,o?c0Y)uE]-42qp@CvpC6N)elSr`ojQXwXPWB_T[In0\\8)Ko\u003ce5/TIkrp]\\,/b\\/t[QOx_,l)v]d1d\\cOipgUZnHvg7[zQsq2Uw,*ih8;nh;.g]g2k8x5bIPoPHO;VrSAUwOx\\T[GcX_Ma0c\u003ce53TIkql[7?piv`upPP`rYh/ulK)a0?2kq_6OoT*h\\[zQsu1Uw,?s-h-`X_Le0cQ.ehPZTylSYWpWrTanz02rDv6],;.gmo2k4g6LDK8RnO=UL/t[aqx_)W4]-/Ka17@h`gTOTK9QH+pU]K0Uw+5\\T[9aY[.g1[\u003ce5cDMjK9QH+pU]K3Uw+5\\T[9aYg.g1[\u003ce5cDNTK9QH+pU]K=Uw+5\\T[9aYy.g1[\u003ce5cDODK9QH+pU]K@Uw+5\\T[9aiW.g1[\u003ce5cEMTK9QH+pV]S1Uw+xdX,6xm+,+]/MtEwOIjylRYW-QsytnzG?YXXEml08qpd\u003cvpg@In[+MoupV\\\u003e0UPvh]eW1],;.r1s2k9pFdXWvMsT:QsytYPW0Y-`Fy,_Ma1[2h`hUczK9MoGpTLTAo5Ox_z[8],;.qp;2k4g6LDL5^]OpWrStXPXys8[I]-[.d\\d1-`gUIkGzQIGpTLT=f`WEY)_6bhJ=elc\u003ce9hBIkqlQXP@TLTxUw,FY,_Ca\u003c_Ma5t1,et9QHj3hMH/WrB/o?T*jdG+n\\J:q4h5u8WGLnPyfX?xk0Cvf)vwj)_6u1cMem7AjaoRN)Hffs`ojQ`w]Tv?tYT;c,N;)K`6vpS7ZH6x]rTsavC3Xz\\3rdK2w\u003cO0r501v5kBaoO9QYu-VM[=ZQTrr-l)v]l1i`0K.e`GOj:yg7Ltb\\?ufTB2i,`-m0O?d4h?,pW\u003ecz;n^snobsW.m)[E]e/9bYcIf1t,,9x5bIXoULn7lQL3[vF3sCX.nhK/r`N\u003eu8l9Yn;+PrT+j\\C*o4Gzj-z)n-c:y5gQiq;ENEK)RYXjjt/;]Tv?tYT;c,N;)K`6vpS7ZH6x]rTsavC3Xz\\3rdK2w\u003cO0r501v5kBaoO9QYu-VM_@ZQTrr*T0x]h\u003c)A7?hPl5ZnWx]7X*TvTufdX3s8G+vGF;y5g?vdxSYX[+Prv/WsOAYag4_e[Dl\\KHi`0K.e`GOj:yg7Ltb\\?ufTB2i,`-m0O?d4h?,pW\u003ecz;n^snobsW.m)[E]e/9bYyKemh,,9h9cYXog8XQbP0w]?T0rX\\)mG7,y``\u003evdD9cjr5]\\,8b^LzpU`4s9/7`Hd-r4o\u003euOpBLnLm^\\P+k0?un?\u003e3q-_7n\\pKqpsCh8\u003cGOkG9QYW;U1[@dTCAih8DnjX4*al@-E;CL4Pk^r[*a;\\.XzXyjh\\7w\u003cK/zKJ?+9kCZH\\7]\\_/Tvz3[wSE]ecFb=WJp`OLmd4OdID+Sn\u003e+k;Pxf`CyjXF6m0d1q4SCh8lCbT;tg,?rbwrsfw[2q-_Iai3=f]+Pi580boLog]\\sk\u003c\\UfT4)aCX4v\\`-qK;0+ddBZHzognv9a`0\u003cfbP,tYd8w=3;dLh1v8sBY3TxPrPqb`T/o4CyrCB7u1c;r`tOutwGLnr+SoK=U][?Y5_DhXGEml\u003cHrn\\8.epDc)qyP8Tobv_.e?`2\\,\\+nl`;)@O3,ONCaoOy^L`;a`c3Xz,7_)WIaigJfA[NtdSPQHj3hMH/WrB/o?T*jdG+n\\J:q4h5u8WGLnPyfX?xk0Cvf)vwj)_6u1cMem7Aja/TMknffsPska`wo@`YjX8-eG\\8z`d1uO?4aHHx^L,skrz=ed4@jfT0x]h\u003c)A7?hPl5ZnWx]7X*TvTufdX3s8G+vGF;y5g?vdxSYX[+Prv/WsOAYa_C]9cHl\\KIqp@Lvr`\u003cdITzg-u+T\u003cXsfzc2iCd6`0`/rpd?-DS7b32yesS+bPd?edg7\\,0;c-[MemkNjE_RXH75]\\,8b^LzpU`4s9/7`Hd-r4o\u003euOpBLnLm^\\P+k0?un?\u003e3q-_7n\\pKqpsCh8\u003cGOkG9QYW:VsK=dTCwr-d1n1`-*pkSmd4OdID+Sn\u003e+k;Pxf`CyjXF6m0d1q4SCh8lCbT;tg,?rbwrsfw[2q-_Iai3=f1cMka40blDrhMX,k1y/X@\\wj,g6mGh:d4d3vthCcz7mf76+iwW/fThCihk;`04?g1_QiqwGMkGz\\L:pn\\/ted/x_z[9aYW\u003ca0?2u4gUIkG8]rPrU]K3ez[A^eg8bYy\u003eept5u8o6LDL3gHO=Qv0/Uv3xqT[I],_8a4d9e5;6Ijylg,O=jw`,nP3xrDc*c0KHz`?\u003ce8k6OjKlPHPoQsytUv3xih,,]-3.em[@i`g@InLsinO=m\u003c:,U)gx_z[;`-k:em_2h`hPdDK9MnOzQwz2pPWEY-4v]0z.yo?2k7C6MWyljXOzQvmt[vWxvbOP"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nAccess-Control-Allow-Origin: https://teams-meeting.com\r\nAccess-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type\r\nAlt-Svc: h3=\"sofire-h3.baidu.com:443\"; ma=2592000, h3-29=\"sofire-h3.baidu.com:443\"; ma=2592000\r\nContent-Encoding: gzip\r\nContent-Length: 475\r\nContent-Type: application/json\r\nDate: Wed, 14 Jan 2026 15:11:59 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7099aba0a85ed61a410b19476d8541c","sha1":"138b7b3efbefe9a0b7451968c05ab4dc197c4223","sha256":"357383b55ac85dbbcfa5eab6f2a5a1d4bab098bc209611b2aef864b385a1b5c5","sha512":"42c90a01d0a80a376dc24d9c8460cabb2add439d6c381f3b7822fec43a30134c7fd397cab61e362641c9012614cf794a9c7d125550dfc4e07dff4306a92f70dc","ssdeep":"","tlshash":"baf0e10098329f5872be29dea6bb8cc96a40c5690c8cc105c10c6a8f71286bc6f174b1","first_seen":"2026-01-14T15:12:30.760352Z","last_seen":"2026-01-14T15:12:30.760352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2925,"timings":{"blocked":1328,"dns":575,"connect":247,"send":0,"wait":267,"receive":0,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sfp.safe.baidu.com/sfp/v1/rd","fqdn":"sfp.safe.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"36.110.219.204","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:58.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.safe.baidu.com","organization":"BeiJing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Sat, 21 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:7C:76:82:3F:E9:F4:C9:41:A3:86:FA:4C:50:75:0F:0E:03:07:C5","sha256":"87:D3:01:98:82:D9:90:FB:E3:E3:9D:FD:F9:64:1E:B2:A3:B4:29:56:E1:76:1F:BD:85:ED:FF:0D:67:D8:42:50"}}},"request":{"raw":"POST /sfp/v1/rd HTTP/1.1\r\nHost: sfp.safe.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 278\r\nOrigin: https://teams-meeting.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":278,"data":"CODED--v20ezLke\\WpWrS1YQO4Yz7*j\\O7rpN2k4gFMDS)QIG,U]m=[Q_4]9g9b=kGgmgBkqcPNUO3SYK\u003cU]m=[Q_4]9g9b=kHe]sKj5s6LDLkgMHSbaut[vW5]US8],;.qphK+tWBVWLPMoupQr/teeP4f,,-x\u003c_Ma0c\u003ce9l9bnTMfsXskwdsnU[x_)[8`X`5)Jl\u003c-DgUdIL4^X+pjw`-ezd6e,h8vH`G)@cQjpC6aYPJ]\\TsQsz;o)d)\\T\\6xlG.rqdnvupFaXX+Mou.nZGH"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Wed, 14 Jan 2026 15:11:59 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 64\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://teams-meeting.com\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"16861a3b9acc91847e90fcd8f1031656","sha1":"db83e363695c884b24e18691d423207bd414dc77","sha256":"23676db150edb09af79969b880f20f537c412dd8c7d8a0100b58aa6cfce4da73","sha512":"03a6e05f76a17c9ef91e403b6358664caabaedfd03918917c8230a05f07fa4fed2f662edf09b7c98b02f30e6626cd09ddc777c71affbd16a219687239a7af490","ssdeep":"","tlshash":"15a02200eaa80ec2ca080380080c2302c000b0808c080c0300a08000280c8a08380c23","first_seen":"2026-01-14T15:12:30.761127Z","last_seen":"2026-01-14T15:12:30.761127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3039,"timings":{"blocked":1375,"dns":49,"connect":516,"send":0,"wait":286,"receive":0,"ssl":809},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon05.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon05.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 680\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-2a8\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 50, 8-bit/color RGBA, non-interlaced","md5":"7c43bdbab8d5cf15557337333002d0aa","sha1":"e063d5b151f83bffa244a087948eab96bfe08f77","sha256":"3bcbd53b14c72e90c1a6b34e8183cd5048c13d70642d8a9c6ce4484632ccd462","sha512":"c72a292ca5f6b604113e87a96e9ed9035a703d0a306d32da68ea42218cf2f6ec014573daa196a49d95597fcc44f47b06901803bf51f5b5a17b8404f462328790","ssdeep":"","tlshash":"810188e4518982a6dd652b5e63bcd5c5cc35b83db2732f4734a89dc6681f58001c4e03","first_seen":"2026-01-14T15:12:30.761923Z","last_seen":"2026-01-14T15:12:30.761923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3841,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ld-icon06.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ld-icon06.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1306\r\nlast-modified: Tue, 16 Aug 2022 05:39:24 GMT\r\netag: \"62fb2d8c-51a\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d1fa7722cad173d919521aa21629e038","sha1":"00ff6b83e74e827cd55957a9cbb147eccca410b5","sha256":"b3d5d4c74727224ac566c642e92cf4ef1f5751801b5a9225cc51f090dd822b88","sha512":"ca6ffd9744e566a6c5840d5714b28eae0493b1acdce12ca15ad8278417b56774891673cb9cd00d46679cee6d78106683fb1fbf199825f9a385abad4cdcb1d1b0","ssdeep":"","tlshash":"7c21cbc46820c13bae80abd2296171dfe8ff421100b34dd4ae425a38479584d91b3665","first_seen":"2026-01-14T15:12:30.762694Z","last_seen":"2026-01-14T15:12:30.762694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3829,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/site/aust?op=0\u0026s_info=%7B%22lang%22%3A%22en-US%22%2C%22cbit%22%3A24%2C%22rsl%22%3A%221280*1024%22%2C%22tz%22%3A%22UTC-0%3A0%22%2C%22xst%22%3A%22%22%2C%22bd_bxst%22%3A%22%22%2C%22bd_vid%22%3A%22%22%2C%22referrer%22%3A%22%22%2C%22xstlink%22%3A%22https%253A%252F%252Fteams-meeting.com%252F%22%7D\u0026url=https%3A%2F%2Fteams-meeting.com%2F\u0026siteToken=4f421a52fc369327eff75f8708b708a7\u0026dev=0\u0026ser=3\u0026v=176840351448823617\u0026s=18377885\u0026e=7282572\u0026isAFF=1\u0026filterAdvertisement=1\u0026auth=%7B%22anonym%22%3A0%2C%22key%22%3A%22%22%2C%22id%22%3A%22176840351448823617%22%2C%22from%22%3A4%2C%22token%22%3A%22bridge%22%7D\u0026AFDbiz=%7B%22ev%22%3A%22page_enter%22%2C%22customer%22%3A%227282572%22%2C%22bid%22%3A%22176840351448823617%22%2C%22length%22%3A0%7D\u0026AFDto=\u0026AFDvw=\u0026AFDjt=31%24eyJrIj4iNiI0Iix5IkciQEdHSkdESEtIUFFSUiJJIkFqIjwiNTw8Pzw5PUA9RUZHRyI%2BIjYzIlEiSlFRVFFOUjUyODY7NyIzIit5IkYiQz9AQSI%2FIjkiUSJLSE5KTUxQIi0ibSI%2FImosT3k%2BdjhXQGJ0OTczLTI6SkhyK1JtNWJyTEdXNl1RK2thc3pFT15wYnNLOWlpYGRgcjhSLywyWDl2N3VpUTZbOXBPeG9lPkhxeVNrKkgzP3o%2BOFM7X1A1aHVqcjpnV1B2XC4sel1bQGQzc3pXV0U4TCpvNk45Q2I3UXVIXDtLW1JiMFdBVWM2d1lJZl9IWkpDXGZtVU1jZnZ2bHhsOWtTKk9dPz0rZTJxKzBML0kvQjNKWypOLEk0Vmxlb25MdE9pWjVCT0FPaXUyZUJIXjpsRywvS21fMEIwb1NqeExqXGJwU1swdmNpaWk3bXV2Yno%2BUDAsQVVXOTdXM3ZsUltQXGNhWUReT1t2c0Y5W3hHOW9cQjVzNTNxL2ttd3UsKlNQd2RdYzxGVkdeNjg2SSpbTDxBU0xSQEpsUUVOeWs%2FXDBvVUMsUltEM2dhVi9faD9lT2twKzM7bGJnajlzcFoyLD9OUz9lXGljNk98LmVgRi1sa2dgUi9hQXZLV2t0XGlxY154ZHQ1cmliLjpoR2VnOEspbU9uZ1x8MjJ8NTlraGtCb3BvcXNDRUNFdEtFSkhRTClRVFAwV2RmZGkifQ%3D%3D\u0026stamp=6246\u0026cb=jsonp_callback_96593","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:58.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cps5/site/aust?op=0\u0026s_info=%7B%22lang%22%3A%22en-US%22%2C%22cbit%22%3A24%2C%22rsl%22%3A%221280*1024%22%2C%22tz%22%3A%22UTC-0%3A0%22%2C%22xst%22%3A%22%22%2C%22bd_bxst%22%3A%22%22%2C%22bd_vid%22%3A%22%22%2C%22referrer%22%3A%22%22%2C%22xstlink%22%3A%22https%253A%252F%252Fteams-meeting.com%252F%22%7D\u0026url=https%3A%2F%2Fteams-meeting.com%2F\u0026siteToken=4f421a52fc369327eff75f8708b708a7\u0026dev=0\u0026ser=3\u0026v=176840351448823617\u0026s=18377885\u0026e=7282572\u0026isAFF=1\u0026filterAdvertisement=1\u0026auth=%7B%22anonym%22%3A0%2C%22key%22%3A%22%22%2C%22id%22%3A%22176840351448823617%22%2C%22from%22%3A4%2C%22token%22%3A%22bridge%22%7D\u0026AFDbiz=%7B%22ev%22%3A%22page_enter%22%2C%22customer%22%3A%227282572%22%2C%22bid%22%3A%22176840351448823617%22%2C%22length%22%3A0%7D\u0026AFDto=\u0026AFDvw=\u0026AFDjt=31%24eyJrIj4iNiI0Iix5IkciQEdHSkdESEtIUFFSUiJJIkFqIjwiNTw8Pzw5PUA9RUZHRyI%2BIjYzIlEiSlFRVFFOUjUyODY7NyIzIit5IkYiQz9AQSI%2FIjkiUSJLSE5KTUxQIi0ibSI%2FImosT3k%2BdjhXQGJ0OTczLTI6SkhyK1JtNWJyTEdXNl1RK2thc3pFT15wYnNLOWlpYGRgcjhSLywyWDl2N3VpUTZbOXBPeG9lPkhxeVNrKkgzP3o%2BOFM7X1A1aHVqcjpnV1B2XC4sel1bQGQzc3pXV0U4TCpvNk45Q2I3UXVIXDtLW1JiMFdBVWM2d1lJZl9IWkpDXGZtVU1jZnZ2bHhsOWtTKk9dPz0rZTJxKzBML0kvQjNKWypOLEk0Vmxlb25MdE9pWjVCT0FPaXUyZUJIXjpsRywvS21fMEIwb1NqeExqXGJwU1swdmNpaWk3bXV2Yno%2BUDAsQVVXOTdXM3ZsUltQXGNhWUReT1t2c0Y5W3hHOW9cQjVzNTNxL2ttd3UsKlNQd2RdYzxGVkdeNjg2SSpbTDxBU0xSQEpsUUVOeWs%2FXDBvVUMsUltEM2dhVi9faD9lT2twKzM7bGJnajlzcFoyLD9OUz9lXGljNk98LmVgRi1sa2dgUi9hQXZLV2t0XGlxY154ZHQ1cmliLjpoR2VnOEspbU9uZ1x8MjJ8NTlraGtCb3BvcXNDRUNFdEtFSkhRTClRVFAwV2RmZGkifQ%3D%3D\u0026stamp=6246\u0026cb=jsonp_callback_96593 HTTP/1.1\r\nHost: affimvip.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 14 Jan 2026 15:11:59 GMT\r\nserver: Apache\r\nset-cookie: BD_CG_18377885=176840351448823617; path=/ ;SameSite=None; Secure\nBD_VEID=176840351448823617; path=/ ;SameSite=None; Secure\nBD_VET=39a21841acc4de50b1972477e93074de; path=/ ;SameSite=None; Secure\r\nx-envoy-decorator-operation: imwebgateway.meg-crm-prod.svc.cluster.local:2333/*\r\nx-envoy-upstream-service-time: 378\r\ncontent-length: 333\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (325), with no line terminators","md5":"72f9c75ee8ae4bdd92d192a77fc3e713","sha1":"e329ee00c1c9031ee868777baf5e93d3952df659","sha256":"684f6c90ef9b171a5fae7dfcedd6702f1a37aae7dfb126fe9cfa8823a4ab4143","sha512":"ab9a06532c114a59189a336748e5178475c0a1f579062339168f841ddbf1c654b4d1f7d55f1e6b085c40e805e7cd970cd2aac553cb0f0eb92262128d9160a381","ssdeep":"","tlshash":"35e07dde3498d0a3ad60275925a66327c34d6801bd98d3cce85ebf18251c5a06f05216","first_seen":"2026-01-14T15:12:30.763521Z","last_seen":"2026-01-14T15:12:30.763521Z","times_seen":1,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.com/static/teams/picture/ys-icon01.png","fqdn":"teams-meeting.com","domain":"teams-meeting.com","tld":"com"},"ip":{"addr":"139.196.39.167","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:45.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-meeting.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 15:13:23 GMT","end":"Wed, 11 Mar 2026 15:13:22 GMT"},"fingerprint":{"sha1":"69:E4:B2:70:98:41:4D:18:39:B3:70:AB:05:BD:B0:E6:FB:71:CF:5E","sha256":"F0:3D:BB:B5:46:64:92:CC:C1:5E:47:7A:E4:22:A3:B2:00:AB:40:97:7F:A1:98:07:12:0C:BA:6B:B7:BF:E1:4D"}}},"request":{"raw":"GET /static/teams/picture/ys-icon01.png HTTP/1.1\r\nHost: teams-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/static/teams/css/style-2020.css\r\nCookie: server_name_session=c81a54c7e9c230fe04b09171974f3138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 733\r\nlast-modified: Tue, 16 Aug 2022 05:39:22 GMT\r\netag: \"62fb2d8a-2dd\"\r\nexpires: Fri, 13 Feb 2026 15:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 50, 8-bit/color RGBA, non-interlaced","md5":"3b90ea09f3ab4a8a89bc1c18a4085082","sha1":"19f165b69ced915f33e2205ce79a0c49a1fe1cfc","sha256":"d71f948ffb63212a2581274c44cf43514f17e851ad0ee30705c03f8ace2edfda","sha512":"03b9126f0e3509db3074176edf1cda39cb750e9e35699f7b13e18c1fdc85c04bf3e208740fdd1ba7f7386c86d0c9daa3a58fc6c7b573b89f7055800fb42924aa","ssdeep":"","tlshash":"670199fc97a6641fc640053773260fe8705c5a45403b801db54f1fe42f6799951f265f","first_seen":"2026-01-14T15:12:30.768976Z","last_seen":"2026-01-14T15:12:30.768976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2016,"receive":2300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall.yuanruan.com/api.php?s=plugins/index\u0026pluginsname=marketapi\u0026pluginscontrol=index\u0026pluginsaction=index\u0026system_type=default\u0026application=app\u0026application_client_type=pc\u0026application_client_brand=browser\u0026token=\u0026uuid=3468afde-ea07-47d2-ac71-adba89409575\u0026lang=zh\u0026theme=red\u0026ajax=ajax","fqdn":"mall.yuanruan.com","domain":"yuanruan.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:49.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mall.yuanruan.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 15:16:38 GMT","end":"Thu, 12 Mar 2026 15:16:37 GMT"},"fingerprint":{"sha1":"69:52:22:AC:68:57:1B:7A:CA:3E:6C:35:45:65:67:CF:A9:59:52:C3","sha256":"B5:F8:CE:E3:A4:C7:CD:5F:95:AA:3E:F3:5B:FA:42:78:BC:FA:92:47:49:6D:6E:CF:B8:DB:81:26:F7:D2:48:7D"}}},"request":{"raw":"GET /api.php?s=plugins/index\u0026pluginsname=marketapi\u0026pluginscontrol=index\u0026pluginsaction=index\u0026system_type=default\u0026application=app\u0026application_client_type=pc\u0026application_client_brand=browser\u0026token=\u0026uuid=3468afde-ea07-47d2-ac71-adba89409575\u0026lang=zh\u0026theme=red\u0026ajax=ajax HTTP/1.1\r\nHost: mall.yuanruan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://teams-meeting.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":true,"data":null}},"time_used":2090,"timings":{"blocked":1045,"dns":570,"connect":234,"send":0,"wait":0,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"mall.yuanruan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affimvip.baidu.com/cps5/report/log.gif?pstage=1\u0026stage=6\u0026logType=END\u0026fnName=logVisiterEnterAust\u0026t=1768403519560\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=06b1ccfb-9196-471e-8a23-6ab9a732fff2\u0026st=1768403518892\u0026et=1768403519560","fqdn":"affimvip.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"39.156.66.21","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.com/","date":"2026-01-14T15:11:59.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cps5/report/log.gif?pstage=1\u0026stage=6\u0026logType=END\u0026fnName=logVisiterEnterAust\u0026t=1768403519560\u0026loginid=7282572\u0026s=18377885\u0026v=176840351448823617\u0026sid=\u0026dev=0\u0026lid=06b1ccfb-9196-471e-8a23-6ab9a732fff2\u0026st=1768403518892\u0026et=1768403519560 HTTP/1.1\r\nHost: affimvip.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.com/\r\nCookie: BD_CG_18377885=176840351448823617; BD_VEID=176840351448823617; BD_VET=39a21841acc4de50b1972477e93074de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:11:59 GMT\r\nserver: Apache\r\nx-envoy-decorator-operation: im-report.meg-crm-prod.svc.cluster.local:2333/*\r\nx-envoy-upstream-service-time: 0\r\nx-protected-by: OpenRASP 2.0\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}