{"report_id":"ba173b97-10b7-4cff-b252-ffa77d1a2ebb","version":6,"status":"done","tags":[],"date":"2025-10-08T23:42:19Z","url":{"schema":"http","addr":"microsoftword365.vercel.app","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"title":"New Private Tab"},"submit":{"url":{"schema":"http","addr":"microsoftword365.vercel.app","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T23:42:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-08","alert":"Phishing Block","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"uhf.microsoft.com","ip":{"addr":"23.49.24.19","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":46576,"first_seen":"2017-02-01T13:45:45Z","last_seen":"2025-10-07T12:29:25.102728Z","alert_count":0,"request_count":1,"received_data":4478,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"cdn-dynmedia-1.microsoft.com","ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":54295,"first_seen":"2020-01-31T23:40:37Z","last_seen":"2025-10-06T06:10:29.479376Z","alert_count":0,"request_count":8,"received_data":629444,"sent_data":4380,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"microsoftword365.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-08T08:47:20.84778Z","last_seen":"2025-10-08T08:47:20.84778Z","alert_count":16,"request_count":4,"received_data":67458,"sent_data":1971,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-05T22:15:40.094389Z","alert_count":0,"request_count":2,"received_data":315609,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-11T14:36:04.645305Z","times_seen":17978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftword365.vercel.app/","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bca5d3faf908f0fc5dc9324ec4017eb","sha1":"f590d92a5285215d4011807d0c73d89b65384dce","sha256":"778068abfa889a40ea1c6886d165fa104ce462bb4878d7eb58a39c9be27d703d","sha512":"5ac55d4f46bc9581b810cd59c4f8ec04536f8590f62b30d70c186ccaeb5da28318436617ffe714380f653a9b4c2b25d5fed28d3075cce0235def97d311c36622","ssdeep":"192:kpqKUOayIzvVYPfzKO5sahOI3N6N2W5bEZpDCVH8KaSP:kp7UL7ifsCN6bHF","tlshash":"05121d5f65f390755677713e474fe60632364403a048ee007d6e4b88ffa2a2886b6bd7","size":9734,"data":"","first_seen":"2025-10-08T23:42:20.94321Z","last_seen":"2025-10-08T23:42:20.94321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uhf.microsoft.com/images/microsoft/RE1Mu3b.png","fqdn":"uhf.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.49.24.19","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"unistore.www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 15 Apr 2025 17:38:32 GMT","end":"Fri, 10 Apr 2026 17:38:32 GMT"},"fingerprint":{"sha1":"26:CC:60:07:3D:11:5C:E8:B5:4D:F5:BB:FE:1C:74:E8:72:B5:3C:1E","sha256":"A7:05:D7:9C:95:DE:19:71:E7:EC:3B:DB:A5:DB:12:0C:AD:12:AD:0E:77:DD:79:84:45:4A:5D:E7:2E:E7:EB:E8"}}},"request":{"raw":"GET /images/microsoft/RE1Mu3b.png HTTP/1.1\r\nHost: uhf.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4054\r\nlast-modified: Thu, 01 May 2025 01:26:44 GMT\r\netag: \"0x8DD884F3BEF0076\"\r\nx-ms-request-id: d723e02b-601e-000d-6704-bb2885000000\r\nx-ms-version: 2018-03-28\r\nx-azure-ref: 20250502T023509Z-16668f9c644b7rfphC1STO7f4g00000000zg000000000csb\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache-info: L2_T2\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced","md5":"9f14c20150a003d7ce4de57c298f0fba","sha1":"daa53cf17cc45878a1b153f3c3bf47dc9669d78f","sha256":"112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960","sha512":"d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487","ssdeep":"","tlshash":"d0816d07ff018801919ee9570485507acb618cd1e7f91061a987c825c9b5cf82abcde7","first_seen":"2023-04-05T04:39:01Z","last_seen":"2026-08-11T15:59:12.32508Z","times_seen":12238,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":55,"dns":99,"connect":1,"send":0,"wait":11,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/Icon-Excel-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/content/microsoftcorp/Icon-Excel-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Wed, 03 Apr 2024 14:46:44 GMT\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\ncontent-length: 2733\r\nexpires: Thu, 09 Oct 2025 02:29:03 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296781,c=g,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=1, origin; dur=0, cdntime; dur=1\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e4d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2733,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57f8b0e03056688d70c4b1ffe9ffc13a","sha1":"905b3218f9382d5fbce498d333033d9548480898","sha256":"4b220a66668cd565208a2099d3c8f962e2d1b8561db34477fca88b82c8746c39","sha512":"ab383d506a88d79cb4642f8d7df7426da43136579389254f419c76931e146aecbde001c194e016d285c049696fd44559b6076766ae1b181886abea338a4457f5","ssdeep":"","tlshash":"0e51fedd32548b50bd8c168de737f16bb10fb0d6aa5d02b0c098572ba8c1dab5e80fc1","first_seen":"2025-06-25T08:47:54.217113Z","last_seen":"2025-10-08T23:42:20.925172Z","times_seen":5,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":55,"dns":89,"connect":9,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/mcaps-products_icon-onedrive?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/mcaps-products_icon-onedrive?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 09 Oct 2024 13:10:03 GMT\r\netag: \"1d175733adc735e5bdecc65d6cf908cd\"\r\nx-adobe-smart-imaging: 5517\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 1709\r\nexpires: Thu, 09 Oct 2025 09:41:59 GMT\r\ndate: Wed, 08 Oct 2025 23:41:59 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296787,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940],[a=136,c=o]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=205, origin; dur=0, cdntime; dur=205\r\nakamai-cache-status: Miss from child, RefreshHit from parent\r\nx-akamai-cache: 0\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e53\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d175733adc735e5bdecc65d6cf908cd","sha1":"e0e81daf7c3e1663f5a6b23ddeef3af2c9dc1288","sha256":"97053bb0cae1d7fc730765e978062483bdc9321992bb654562d615e0f56c2790","sha512":"5a898a4e1c4205e793a7463255c6c48bf24809be1b1f911a072d578fb2b0a0cb9be40ed763028c5219cdffaa686d4d865f3a42c7d8b62d3e8a37627464ee5e68","ssdeep":"","tlshash":"8831fa4933467531f0de83b6091760512c74c536e91e942e1916f0309d781fadd17e58","first_seen":"2025-10-08T08:47:23.343093Z","last_seen":"2025-10-08T23:42:20.926046Z","times_seen":3,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":216,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftword365.vercel.app/","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T23:41:58.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoftword365.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\netag: \"4483c1eaabb109a8c6446291596fc2d8\"\r\nlast-modified: Wed, 08 Oct 2025 23:41:58 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rzcrs-1759966918108-c1d9533775ec\r\ncontent-length: 9947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":50055,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379)","md5":"4483c1eaabb109a8c6446291596fc2d8","sha1":"86904ff7123d8a660e44d12e7768c8822f32f26b","sha256":"7f333b55cc759acae78c73faddecb0b6428d262fc1b6cc772b92ce8369fed52f","sha512":"2e3a0288a7492eb70a8d2fdc5b7dcd2aea50947ea401ea27bcbcf4dc400e808b9bab9cfb89b5f7686189b0ce627ec9ef668bf196f6d5ea16bf3a2d1b5b35f87a","ssdeep":"768:2k8xHb5HRc/V7BvPscZdBbfbgteEXBy2jHDruXjHDruFcXCp7EssHK:2fHb5HRc/3vPscZdBbfbgtxBv7Essq","tlshash":"c723c62b91f320235613b1745bab6b053b768103c509cd187aed4b48dfc2aded993b9e","first_seen":"2025-10-08T23:42:20.926589Z","last_seen":"2025-10-08T23:42:20.926589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":27,"dns":0,"connect":1,"send":0,"wait":11,"receive":323,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-08","alert":"Phishing Block","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33205\r\ncf-ray: 98b97df9acaa0b3d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220062-FRA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 940424\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4%2B45Vj8yjrUaX9aKHwOHnOQ%2FzF%2BOptGNHwxmlX%2Frsq6h2s2mb2q7fdLPWcyHa3V%2Fe9dPxxn5yaeuk9koER2sEQmz5G%2FgD9e2qt2ea6NMugY%2FZXV%2FSgNDNE6A0DQpiflstgk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-11T15:26:51.337059Z","times_seen":25356,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":37,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/Icon-Outlook-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/content/microsoftcorp/Icon-Outlook-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Wed, 03 Apr 2024 14:46:44 GMT\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\ncontent-length: 6406\r\nexpires: Thu, 09 Oct 2025 03:16:15 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296785,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=5, origin; dur=0, cdntime; dur=5\r\nakamai-cache-status: Miss from child, Hit from parent\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e51\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f3c9130efb681b97197613797fb5b55","sha1":"1c3fb63ad6b0b75c153e92137a569db2e48e4c17","sha256":"2b9a1fd12f3209b001a330a04222363012be8450bfd57cff1d3e055f99b47b55","sha512":"4876905e55ad1432afcf081bf75c27cfbbc5a070c40bfc83848e3d5c9c928c097ad402d17e56ec402174cc4affaca85ec4935499407142e2c6d4e9ed8a05f8f5","ssdeep":"192:9nHCktKx+KeOTkyYcR8rah80hh8o/8oVj3MBvjk:JZNCg81hHMJY","tlshash":"d7d154dd2b01cac49d9082cf7f1578ba761fb0ffab4e4ab1c0549bb26885c5e0d55e82","first_seen":"2025-06-25T08:47:54.190339Z","last_seen":"2025-10-29T09:39:56.87163Z","times_seen":5,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":53,"dns":82,"connect":12,"send":0,"wait":33,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/1036857-hero-background-option2:VP1-539x400?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=95","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/1036857-hero-background-option2:VP1-539x400?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=95 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 08 Oct 2025 23:41:26 GMT\r\netag: \"ce4221d6630cc3182a6b0bc3e01c0185\"\r\nx-adobe-smart-imaging: 20886\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 18399\r\nexpires: Thu, 09 Oct 2025 09:41:58 GMT\r\ndate: Wed, 08 Oct 2025 23:41:59 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296780,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940],[a=136,c=o]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=204, origin; dur=191, cdntime; dur=13\r\nakamai-cache-status: Miss from child, RefreshHit from parent\r\nx-akamai-cache: 0\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e4c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18399,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ce4221d6630cc3182a6b0bc3e01c0185","sha1":"8d65b46d52da2593a98d3d51ee36fbc988988614","sha256":"74bcc4f9a89ab0e1d083c28c7359984082ec94dc33c121abe77ba5fe0088b262","sha512":"9676c75646a9d49d34e6f931f77f107d0749dbe179e3293d9bedee83a679027a2fdc1f2373549fb8206a4f1809a0be7266c7b88592b9321876653a03a6e604a0","ssdeep":"384:/An6js50itqt6NS09go12iwxfyQZewh/HLJ70rRY3Io:/QGs50Iz9gYdw2uPQm","tlshash":"8d82bf24364f605698b85af7d2d0b7008b429425d21985dfd3a01e4a3da9fffa1c3af7","first_seen":"2025-10-08T08:47:23.33017Z","last_seen":"2025-10-08T23:42:20.929867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23984\r\ncf-ray: 98b97df9fcd20b3d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230147-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1275753\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aa07f7%2FQ8L5%2FRUvFSO31zQke0PkvQybTzm11UelZwq5IXwN%2F5vmcng6Pxq1sdbi1NH3ofpCNMnLsL2DBQWZsnDRsR%2B3TAvzuvQ8j2LdzQ8HE2SvGB5PjxLv1K72BuoNfjOM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-11T14:36:04.645305Z","times_seen":17978,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":74,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/OneNote_17x17?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/OneNote_17x17?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 08 May 2024 18:00:08 GMT\r\netag: \"234f41b117b5b66c0b2c57427d519726\"\r\nx-adobe-smart-imaging: 22247\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 3863\r\nexpires: Thu, 09 Oct 2025 06:30:30 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296786,c=g,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0, cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3863,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"234f41b117b5b66c0b2c57427d519726","sha1":"8db2b98d5756e9704ca90bbe9fa59f8ec327293b","sha256":"896ca0c9125bee7785aadcaec8e7840f2934353c08e0aadb9158b4b1a3978028","sha512":"e5d555f2702fe828788576458ba8a57e1b0379b59fa831ca9fe7ebae00ffd986e36b4b0d5d7dabe118ffbeaceeb85d7b9caa95f6fd42c9c081a2e9b634e9dbd6","ssdeep":"","tlshash":"6f817d9661358e8bd74d71b5044e2bf799dcc23f887ce22329d1a71248412b89ecbc15","first_seen":"2025-10-08T08:47:23.350979Z","last_seen":"2025-10-08T23:42:20.934595Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":53,"dns":78,"connect":12,"send":0,"wait":15,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/1038004-2-hero-background-2000x725?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=2000\u0026hei=725\u0026qlt=100\u0026fmt=png-alpha\u0026fit=constrain","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/1038004-2-hero-background-2000x725?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=2000\u0026hei=725\u0026qlt=100\u0026fmt=png-alpha\u0026fit=constrain HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 06 Jun 2025 03:59:22 GMT\r\netag: \"1ab5757a0b78fbd46e259f7330a48c37\"\r\nx-adobe-smart-imaging: 752833\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 585590\r\nexpires: Thu, 09 Oct 2025 04:06:11 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296777,c=g,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=0, clienttt; dur=1, origin; dur=0, cdntime; dur=1\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e49\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":585590,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1ab5757a0b78fbd46e259f7330a48c37","sha1":"3ed28ebb2fa99325f11ed303e40670eba5f22502","sha256":"19f172cf56cbc4e710420451fffec6201a53e5eee1be2655ae0989cddae78d9b","sha512":"efa48c0c839be274eae524ff5f119d2195f7a71bf3262839ffb539e9f03627b0c91fef8299aa9582a48137f9534a30e8c1bdd21aad5d310ca3457d89039dbef5","ssdeep":"12288:3lexxJaSO5njfCugjyLGlpJ6RiO//IwIllI2EMwcHZWmFXyTON:1exxJaSKfCugjyLG0L//hITZwcHQmFCI","tlshash":"2bc433c932611a1b771b829fe8197c3dd22241fa96d7948ac3c2e1ec11916fcd635fa3","first_seen":"2025-10-08T08:47:23.325598Z","last_seen":"2025-10-08T23:42:20.935827Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":15,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftword365.vercel.app/api/product/info","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /api/product/info HTTP/1.1\r\nHost: microsoftword365.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 08 Oct 2025 23:41:59 GMT\r\netag: W/\"2e0-dajz6S1AfQqm9jmGjQk5kpRp46M\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rzcrs-1759966918862-2bed73d4948d\r\ncontent-length: 736\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c7bfb622bc69a620ab2922579df51f7","sha1":"75a8f3e92d407d0aa6f639868d0939929469e3a3","sha256":"db74da0cc7d51389f804de2a43434adb649ce8ba1df2e4d12a24d49a65acf30a","sha512":"956caef2f480cfdad8608ca76b3d6d51da14c6421d94af8785b7c57c52d0ae66a005421fbfd75c444be0ad90976c33cca8ff14b1ade0c99e8c731f93d93cf9aa","ssdeep":"","tlshash":"b801102afa3e7432c9900352214b7fafb49c026371d6841348af944d92f51ddd1c7ad9","first_seen":"2025-10-08T08:47:23.336366Z","last_seen":"2025-10-08T23:42:20.936418Z","times_seen":3,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-08","alert":"Phishing Block","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftword365.vercel.app/images/favicon.ico","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:59.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: microsoftword365.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 08 Oct 2025 23:41:59 GMT\r\netag: \"40efb806768326673e481bad06075ac6\"\r\nlast-modified: Wed, 08 Oct 2025 23:41:59 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xtc4m-1759966919276-3c6cd81e73cf\r\ncontent-length: 357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13859,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T15:57:26.494444Z","times_seen":17839182,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-08","alert":"Phishing Block","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftword365.vercel.app/api/download/word-free","fqdn":"microsoftword365.vercel.app","domain":"microsoftword365.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T23:42:00.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /api/download/word-free HTTP/1.1\r\nHost: microsoftword365.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 08 Oct 2025 23:42:02 GMT\r\netag: W/\"3f-xv9FCvtlUgzZAEW+yQYQoN5qjbo\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::2v6l9-1759966920845-34845fa30335\r\ncontent-length: 63\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e5aac5e79019d410ebb777c45a2077d2","sha1":"c6ff450afb65520cd90045bec90610a0de6a8dba","sha256":"edc821921d68435733822a468fbcc33680d89a668250acf5ce11c072a2878d93","sha512":"f5d218e543ca90cab168808fb9fec4f2a1a52689b6aefbf4c7c89bfe557f5815ad143db90dc4915a1b698cfa30ecad916f7e02c1a7217100053f636d4d5dc5e8","ssdeep":"","tlshash":"e5a0220fa38c2c3e0303028230200c0020c000e0e2202ac0c88a2228030a088e08b008","first_seen":"2025-10-08T23:42:20.940773Z","last_seen":"2025-10-08T23:42:20.940773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1676,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1665,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-08","alert":"Phishing Block","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-08","alert":"Phishing - Office365","trigger":"microsoftword365.vercel.app","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"microsoftword365.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/Icon-Word-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/content/microsoftcorp/Icon-Word-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Wed, 03 Apr 2024 14:46:44 GMT\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\ncontent-length: 2241\r\nexpires: Thu, 09 Oct 2025 02:56:58 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296776,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=0, clienttt; dur=7, origin; dur=0, cdntime; dur=7\r\nakamai-cache-status: Miss from child, Hit from parent\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e48\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a26b4e7b5a126e0204ea26ad5b423be","sha1":"aa1bd35c17ef8d9b77644c7c5172833fe44d20cb","sha256":"571accac663b3b878b6d9ddba25717054f2f9974030fd08d4e8ee06418c84396","sha512":"892449a180b2fb261a2d6f7ec697d44acf433f7ae045bf4a871fef545cf62cf32648fa2868c7d7ca4b0c33793d461b0cdff70a9293ef95e894bc9536ae171fa5","ssdeep":"","tlshash":"d841ecd8c84cc5903ec5c28baea5be05b52fb0e26a5e45f0c5902b79b5c5d5a4e10fc7","first_seen":"2025-06-25T08:47:54.259571Z","last_seen":"2025-10-08T23:42:20.941957Z","times_seen":5,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":50,"dns":90,"connect":3,"send":0,"wait":25,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/Icon-Powerpoint-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.79.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftword365.vercel.app/","date":"2025-10-08T23:41:58.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/content/microsoftcorp/Icon-Powerpoint-28x281?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoftword365.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Wed, 03 Apr 2024 14:46:44 GMT\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\ncontent-length: 3244\r\nexpires: Thu, 09 Oct 2025 02:29:08 GMT\r\ndate: Wed, 08 Oct 2025 23:41:58 GMT\r\nakamai-request-bc: [a=23.36.79.135,b=444296782,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nserver-timing: clientrtt; dur=1, clienttt; dur=6, origin; dur=0, cdntime; dur=6\r\nakamai-cache-status: Miss from child, Hit from parent\r\nx-akamai-cache: 1\r\nakamai-grn: 0.874f2417.1759966918.1a7b6e4e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b83f34b70954c6254fe80ff31461ef7","sha1":"02b5099786e8acdb637a7b14ca4c963e731d3b3c","sha256":"d686ef63a97b187f58e3b3bc1cc1000fe87f950287570631204b221c3d8ae547","sha512":"8c547c70eeec89bf36641ccddbd3dd9c271feaf90b1b0f53eaf4dcc04f88af01797503b2b8b691af51ac918a299c8a3ef9f0788ff19175682c79c12ea603e4e9","ssdeep":"","tlshash":"146104cd5791a5442ec9c69bbf55a95ab20fb0fb9b5606f0c0849bb93091d4e0e04e91","first_seen":"2025-09-25T08:13:36.398871Z","last_seen":"2025-10-08T23:42:20.942632Z","times_seen":4,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":54,"dns":84,"connect":12,"send":0,"wait":17,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}