{"report_id":"c3b8098c-15ca-464c-8fe5-00cc9c9a239e","version":6,"status":"done","tags":["dyndns"],"date":"2026-06-06T11:31:30Z","url":{"schema":"http","addr":"www.microsoft365office.duckdns.org/","fqdn":"www.microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"title":"Download Microsoft Office 365 for Windows and Mac | Microsoft 365","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.microsoft365office.duckdns.org/","fqdn":"www.microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T11:31:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"www.microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"cdn-dynmedia-1.microsoft.com","ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":54295,"first_seen":"2020-01-31T23:40:37Z","last_seen":"2026-06-01T07:43:23.76781Z","alert_count":0,"request_count":8,"received_data":244001,"sent_data":3878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"microsoft365office.duckdns.org","ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2026-05-04T02:18:28.915573Z","last_seen":"2026-05-30T19:06:23.332466Z","alert_count":224,"request_count":56,"received_data":6399303,"sent_data":28603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Onsen UI","description":"Onsen UI is an open-source HTML5 hybrid app framework offering mobile UI components for PhoneGap and Cordova development.","website":"https://onsen.io","common_platform_enumeration":"","icon":"OnsenUI.svg","categories":["Mobile frameworks"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}]},{"fqdn":"js.monitor.azure.com","ip":{"addr":"150.171.109.200","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-10-25","domain_rank":3578,"first_seen":"2020-04-24T19:32:44Z","last_seen":"2026-06-04T04:01:54.511309Z","alert_count":0,"request_count":1,"received_data":93218,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"browser.events.data.microsoft.com","ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"1991-05-02","domain_rank":380,"first_seen":"2018-05-25T06:23:05Z","last_seen":"2026-06-04T05:51:00.43809Z","alert_count":0,"request_count":6,"received_data":3548,"sent_data":4241,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"mem.gfx.ms","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2012-09-07","domain_rank":38230,"first_seen":"2015-02-13T15:56:33Z","last_seen":"2026-06-01T12:17:07.141199Z","alert_count":0,"request_count":1,"received_data":31027,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.microsoft365office.duckdns.org","ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2026-05-04T02:18:28.927355Z","last_seen":"2026-05-30T19:06:42.752822Z","alert_count":3,"request_count":1,"received_data":139336,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"58f8c2c7b4bdc92d8bcabae3ac4a1bf9","sha1":"e98b85b2e6560293454e71479b69b9b7fe07afb7","sha256":"0df11ae557c364f7279473fa50507714fdfa47045f2358f72d427aff28e2738f","sha512":"71fabd20c6f9e4b0f54a67147872fa1c1d7c91558d647fdd08f56c8f86a3915f897315041f29860b5465ce6ae2e1364804e859c52192732cb69b7f8262831938","ssdeep":"","tlshash":"ba7000c800020202eaa882082202800002b00a002080080020882220c2a8a8020880c0","size":22,"data":"","first_seen":"2025-11-17T10:04:36.600234Z","last_seen":"2026-06-06T11:31:41.082329Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH69d585e01cb601a02e396b34fdcab8c4.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d585e01cb601a02e396b34fdcab8c4","sha1":"927b627d478c369fd3178ff317b8daefdec61615","sha256":"26b889bb3d6c0902cc83008d8e84efaac66d8e86f36bac303b45bda9ba6d7c72","sha512":"389be59360762166d0647d5089533f088c491cc228bfb43aa4f0450a10cb645e91755aec172b1242c995de7f51ad0739937096309839dbd0004265301a58c308","ssdeep":"384:aY6+cIDcPNAWti0aXo2johZHJjVka9kE0YuWcB4:yicPyWti0N2khZPku0YuWcB4","tlshash":"7092c8cc71e3f05552676065a22f230bf37d19bb988ca8409219e9d1bd78d1a8327fb9","size":19448,"data":"","first_seen":"2026-02-04T12:19:19.836251Z","last_seen":"2026-07-15T04:45:41.071059Z","times_seen":1502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/wcp-consent.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f524e20ce61f542125454baf867c47b","sha1":"7e9834fd30dcfd27532ce79165344a438c31d78b","sha256":"c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9","sha512":"224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2","ssdeep":"6144:dIcsZZWWI0BDqL9W4sC6Hdo7NjIZjIZP0hZRWLF9LmSF/EI:dIcsZtI0BGoHdo7NjIZjIZP0vC75F/x","tlshash":"98546d7fe3c420ad03012346b885bb39ba1d067d7691d6c5f84ca57d23c2b95c52abfa","size":279220,"data":"","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-06-06T11:31:41.064637Z","times_seen":10744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/8f-61bee0.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"1db952ac94215b6a808fae736bf78e9f","sha1":"7cfbad228dfdf9f8f08ff965ca0ac50795f294ca","sha256":"5f229d2c8cf661edd55acc6fc9bed3a0ef8c3d97830de0c2eb7cee0d9dd86a78","sha512":"8d8248298413ca9322755ece43b77be2778f20b1a470fd760b1dbea484c5338d1c6d15ce157012817bde6f05ee282c6c329dd1819573b9bc5cf407954dc84c2f","ssdeep":"1536:pfwV8gc49fjDAKKuFepxhXaOG+59gkpCIlIX8BJWxFush9whY8dOyd1EwgXA7GR1:pf4KuFepxnISCI9d1EwgXA7ViVEMK/0/","tlshash":"bdd33ca9b15835768bdf50fc978f1408b2334429988a6458b82cdded1878e4f21b7ff9","size":142674,"data":"","first_seen":"2025-12-11T05:05:37.265819Z","last_seen":"2026-08-13T22:23:06.981045Z","times_seen":1822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/micro.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d12d054e6758975a2ec39ece9e3e06b5","sha1":"e75de43beddbf0f6ecc9cf41f1369fca08ab51b9","sha256":"3b230c0e9befcb75fe44eeab0f487e68fc89d78fafa97d7d81f65f4039badef6","sha512":"11ffe2042176c4bc0b5e5c5c152a4dab6f5477ca5f1e382b8bfaea52f9591f9d3b8eafa41cc4d04a1ab8533b237de3d978f92cf9c851a3b3c2a3ff2598e6f8d7","ssdeep":"","tlshash":"6201523b2994d072003324609e5be7947e33a2321042f9d360acd50f7f9ed031d798a2","size":843,"data":"","first_seen":"2026-02-23T07:13:54.149575Z","last_seen":"2026-06-11T11:21:53.542878Z","times_seen":3394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"314d903aebad4fc32911105f1436818b","sha1":"f183249558b01481731dd9ca53f921d8c1880a76","sha256":"382b2f86dc8fe55c6c4d27ad60300093a60b05cbc7524628f565a72bdc934261","sha512":"d96007b8dc2a02308a80739bba279ee196de8947a6f1b999fe2038816ab5df95b54bf8eed183e92ec70c28e019e0d8096daa9fae1d57df91a8e762e198401cd3","ssdeep":"","tlshash":"56014c445c29c4f43a9e239f5375e1de726005871805f701784cbd089fb0fc88a5dde4","size":668,"data":"","first_seen":"2025-10-08T15:48:13.221408Z","last_seen":"2026-06-06T11:31:41.085836Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASHa238861e6209e4e02576ddf5d1749c8b.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a238861e6209e4e02576ddf5d1749c8b","sha1":"b9ff67fedc61b0c4a7720eda4b95c2dcf8022f07","sha256":"8198f47143a8196b8f8f4e14ecd870842b5715c7ea9f4e667361af9933fb828b","sha512":"50e82145dc06093df0bbabbb0c60869922da89a3c370c03872ad7f1b2935b205a7d67e824db0351f1b5853a8da40fef2506ab001cfc96438bb32d9f3873e99a0","ssdeep":"","tlshash":"a871765a7bc5e030ab5d1433e26fda0a717136a3c84980a1f0598ca83a75b6572b2bf4","size":3629,"data":"","first_seen":"2025-03-21T20:40:09.942722Z","last_seen":"2026-08-13T22:40:29.013956Z","times_seen":2062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"10f7433b06ba90f5bca9d7de3424cb13","sha1":"59c7086cf38ba17a48d64122370fe53647f2c34f","sha256":"497461af4ec8729048d538a446872cedffc071496a3f56104e9d3c5859fe37e0","sha512":"cf25960bd33a21ba944c419143d4df7b863320fb94293345afaf40c2e71411847cf85414e6bcf0f8edb86c22b4233910c34628217267c83d96df1820c061432d","ssdeep":"","tlshash":"60f026acd6e52a17220a4114ae2da143a531c023459ead257fdda28c2f1d8a7c2993e4","size":545,"data":"","first_seen":"2025-06-17T17:33:16.440234Z","last_seen":"2026-06-06T11:31:41.086889Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-product-pricing.ACSHASHf9c4f2ed4e61ec88e9a455f543919e32.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c4f2ed4e61ec88e9a455f543919e32","sha1":"547530b87e9b1557cca2086d5b519c1db71a7de4","sha256":"c8f2af2bc3db2d43bb5799709e6a3904bae37fd04032969e73d14d76d59c4309","sha512":"b56348c57f7a57f1931c89ace7ac8e835af7b57298ccdc15deb3a011d55786aad9c9e0237cadec894f00da50a07ebacbaeea06915fa3985744c88e6d996e9656","ssdeep":"1536:spsJ/Brkzb7l2nUcNSbZc4PerQfjqjYvYWITFEs6+Qfamj0pYrLJoDpZA15pepKF:spxerQfjqjYv0O9AC","tlshash":"29d381e651f41f33046a1629dbeabfcf79ad0407a76a90d2388d12ec0f76a2443b55dc","size":139598,"data":"","first_seen":"2025-12-16T11:54:01.710437Z","last_seen":"2026-08-13T22:40:28.893094Z","times_seen":490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/msocbody.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"326028b8f0833e2e8b2f49c4bd267ce8","sha1":"8127f49479063da154926df98ae006810a2f3f97","sha256":"b603135020e397e5315a96cbcb5f6192d90e9e96209307eeb787ed4ba9ac917a","sha512":"7e033f46bc49e08b1fc7cf5b97b57fd5eb547badc352bc8384a7ba4d200476eb0910255d1672b0465b52999e78816ca15ac4346bfc73ca318d3358f5f2049b5a","ssdeep":"1536:J0tWbQ0IWRSv9mTGU508Gku7nufKdwdL4/aC9Mj1FWerIj9uVbxdu6Dx36HMEHm1:WWbQ0I9n60DkuzuL5J8zqZZ4BiZN","tlshash":"2d042b74b250147786ef12ab629ab3c07b682097b500d495745dcc0d1fdafca20b7eee","size":175496,"data":"","first_seen":"2026-04-29T19:09:13.734466Z","last_seen":"2026-06-06T11:31:41.006064Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","fqdn":"js.monitor.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"150.171.109.200","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf5cc7f4b57526cc37893dcb83ded031","sha1":"e953783be0a7894585778455aae3d0df094d6f29","sha256":"3a790b6c0d26d7a4d292cb27f992eafaff42c37e9318b2ab704207039127fcb8","sha512":"2320f9d7811cd773c1e5c2e95a31b39e9ff62a2fa7ca431975873dab57ae42a75ba720d15aeb47fa2ea127d0766eb5aa15040cffd04bf7a8cb8bcd7236069c40","ssdeep":"1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn","tlshash":"d793f7cd71c2f066426b7075907f110fa33f5995384c89a4e22ae4d93cb986e9367fac","size":91802,"data":"","first_seen":"2024-07-01T20:35:42Z","last_seen":"2026-07-22T21:53:54.710675Z","times_seen":6874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ae0db4aceb93c79bc80fd12123ef538","sha1":"a369fbfd7544a16066d62e89c49947017b09c812","sha256":"50c592d25a921850c19ef913c0f8df011444158a8bf73779e6788016e1161368","sha512":"e9baf45c0506baca4062b0b799307bfd0c12c6489acd22f508818923b259260f44c785fd7f18bdb4681d593eefa46142075b73759b35a5693fb65aa4964eef04","ssdeep":"","tlshash":"0011f90b38d601651baa313faf5f1117361891430008f914bd9c63585fa0b62bcfafc5","size":1075,"data":"","first_seen":"2026-01-20T21:51:22.211276Z","last_seen":"2026-06-06T11:31:41.087872Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/featurecontrol.ACSHASHf120033122e43a4cb0b53bb306afc5dc.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f120033122e43a4cb0b53bb306afc5dc","sha1":"24aa855c3086573936871ef159a4806cfd4cf904","sha256":"0776a8d556c597b202331e992bdabe65be587f468595214c7eaac639736687f1","sha512":"aab4c0641a122037e71757338b483b04114c10c5413e2140d07a5f68d264754695580c7657a383981ce2cc5d8b0233b124678bdbf89eeb2b8b3b461f13ed45cc","ssdeep":"","tlshash":"9ec08c3fb66836303d8b0db1502e46da6c2e5dd801051121145cd81864d86d98236a11","size":146,"data":"","first_seen":"2025-03-09T08:38:15.185061Z","last_seen":"2026-08-13T22:40:28.966891Z","times_seen":3155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/meversion?partner=OfficeProducts\u0026market=en-us\u0026uhf=1","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb8767e66871b074354111bf87a8e859","sha1":"9277d92a08e835f9d667878a019aa2b3d436b919","sha256":"6c48236f8c764c98a9a6690f7f3d2744e5ea3f37d7e39863b9c1213218a70fbf","sha512":"db1e3c71aaed34edb184135bc1b15c74605c3c9b820ff7d75da6addbb5647dd31a0950ab9afab254f982efb8f3e3fc95829d6aad802f3a5f75abb717def4f1f1","ssdeep":"768:c2y2n0SM0/RZsJIjrAnJdv2mfQFc6mjVqMP62A86LIzQIR:cPM0S5/zsHJdemYFcw662A86s8IR","tlshash":"69d2098a75c0b17582637078a67f650ff33a6aa1644c8518e41afdde7cbc80d9223f9d","size":30427,"data":"","first_seen":"2026-05-30T19:06:25.243653Z","last_seen":"2026-06-06T11:31:41.035023Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-click-group-telemetry.ACSHASHf25fec6821f63d701a6b6291a4011894.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f25fec6821f63d701a6b6291a4011894","sha1":"1260ac884282372b86f3a600ba8903ad75983e67","sha256":"dd8619be444cce5f8db053215bb018c0bbc09af7baa9e66618bdf041b0a2e09c","sha512":"1f3c21e2c32dc8362a1ca12801fec56bd22cdaf0bb7fb8d0d118348019eb843a63a171154bb0392dfee268c5727f47cf139144596c0dfb7d12125ce659db35c9","ssdeep":"","tlshash":"7e41af1636f261e1021750ee03cb9185b226e58bb649d58cb99c97180fa9e71b5f3bcc","size":2432,"data":"","first_seen":"2024-08-06T07:44:39Z","last_seen":"2026-08-13T22:40:29.009482Z","times_seen":1184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-polyfills.ACSHASHtrue.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f036b7d721f26c8fd6282d00a82eb1b3","sha1":"8d10439e8c742c9b07fe8850b8d530e01b9a9c8a","sha256":"7b1b45589d034d7b47c4ef1f3650c194fab95280786d9cc4d93d2f052fecf1af","sha512":"5ffaf53e68821c61443fb4d517a5c0a9a27669fa7f7baac63c9ebe29ec96ffdd1d04726515c8166d601165758b64f08bea622b900b2ab9db19cf75bc6c1a5c76","ssdeep":"1536:qYc4tC679NFbouCXxlKp+FWOzlBEn8TWpOS0hzsj2NR0Gz+jjNrv2iuKbkDtU8uF:NjBNF0zxiO5hTnS0hzK6R0qYr/","tlshash":"8424c5dd7a9ab4a196a33274002f510fb1bb59a5f84ccca0e195d4e4bc7ed0a513bf2c","size":216931,"data":"","first_seen":"2026-03-06T06:09:43.965918Z","last_seen":"2026-08-13T22:40:28.917898Z","times_seen":607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/msochead.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f4873155a1764894b57be13fb26a27","sha1":"2b6b045406fcf396d088c9aa594e2c5387b101e1","sha256":"10b8bae707b7f09af1247bf1ce136b870acf5a5f8a5ad8183cb26eb11df344ac","sha512":"3666875e9dfdbb7324173ead0953b23df429636d8f83658c396473af591275478f3fb4d1e29d6b69a1df2f20e0e580b779593f4f1e3087ee13fe3b72502b9ab9","ssdeep":"3072:JY5bK6wOJfloAWZAXKvV4FMin3O5x/x8u2c:u5bK6ZJbKvVUMinix/xb","tlshash":"0d145c75b298117647ea06cab1676144f72e2257b400e496b85cdccc2bdaec710f2fbe","size":198850,"data":"","first_seen":"2026-04-23T15:45:10.052447Z","last_seen":"2026-06-06T11:31:41.055109Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/sites.ACSHASH4bf64736153944008cd5ca16b7743b18.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bf64736153944008cd5ca16b7743b18","sha1":"fab7692d6b42a8a2634936b0166a508967c72214","sha256":"b8a1680c63995046b5d4450f585e009235f89439aeeaaa05a14b1a55a69ab32f","sha512":"5cfcf1266d4b68159c7e66e270999b1a87d4d77fa1907ebfda4bea07f129c455c64f6e984a1c33d49387966261298f37facaff56b9739e7a80838b063163a51f","ssdeep":"","tlshash":"a401234a719994e1057f740e197bc92ef0b0467184dae1740083a47e3fbcaf40b63f25","size":683,"data":"","first_seen":"2025-09-15T21:05:35.552333Z","last_seen":"2026-06-06T11:31:41.032011Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/cookie-compliance-manager.ACSHASHd471cafc5d23f4577f5cf2676dcc276a.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d471cafc5d23f4577f5cf2676dcc276a","sha1":"640b62299a16bf5889f3d690d2944cae7d1a2f10","sha256":"e7f57328ee44fd0e17468b1c0daf38980965311d4334b03acaa269efc931aba5","sha512":"6f120ba04a03e90b878cfd244ea28b9a7caed69bcdce47615cc19fe76cbb712cdf1d231da6759e36d5687c310c5bec83761445760b88385c17f2553429a4ac8e","ssdeep":"","tlshash":"ef81506772c1607457ab0536724f9607b2b23f7785884462b11183a43aa9f3a76b3afc","size":4027,"data":"","first_seen":"2025-10-21T02:40:21.025095Z","last_seen":"2026-08-13T22:40:28.97171Z","times_seen":2480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-base.ACSHASH7e89d60ab495cd79ad67f82f4ceb5b7f.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e89d60ab495cd79ad67f82f4ceb5b7f","sha1":"8ee73375160e9d61bdb84870f47521878b8e3b9b","sha256":"52a714dd88565410005b6fa2ec1e02b54ec69f8c260b7aa06ad7de34b1ab2a26","sha512":"5ca0d8af48d89757cf70cd5afa0fb14ed4e147a98a78fbfdb39f0131d0d311e304084bfcad4d3417675aee8a8e12000a779f4711a317ad79fd2f1d7baad0145a","ssdeep":"3072:B64+dguiiYaeGpKNPN5/4OYQk/qNeUySLFMY+RNPN5/4OYQkq3UycLH1w:B64+dVdeGXh0w","tlshash":"17141764b1d26532199312e9042f0209ba3a70b7364dc81a765cfed61f6ccca46beff5","size":208580,"data":"","first_seen":"2026-04-14T05:05:18.329704Z","last_seen":"2026-06-17T10:44:54.843638Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21767ddb88a6a72011a1e8a790118f8","sha1":"7da3ddc01f691cfebd40a1eddf137b392328e417","sha256":"1c29b01e1f2236daa58af70c28ef91dd4e8a7f97da1e3be16bf5dfe5f0bc2dfd","sha512":"c6a26c6752b23fe9cba80a16458811a6296e5e07573677be6410e0df72ee13050a450a7b14e05178fd815e40150d81c8cc602e323845a76939243d3d847e403b","ssdeep":"1536:zL8yyxT9wG4SS3M2SzG10yveUXi4i37QEeCs/sWzjp07OG5E:n8ZJhGTSPr8zjp0Tu","tlshash":"3bc3298d72d57ca74296a1a4642f2306733a6839b408e4acfd78c5d6bcb4e49407ff78","size":123667,"data":"","first_seen":"2025-09-06T15:08:26.843222Z","last_seen":"2026-08-13T22:40:28.968207Z","times_seen":834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-events.ACSHASH4c28b55b872280fe389b01920b5c9315.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c28b55b872280fe389b01920b5c9315","sha1":"8db22267b4be133a20b949fd7c8770da63046150","sha256":"62c958e5797af584fdf1a430183aaed9f323aded640a5d2c7aa73d67bf72794b","sha512":"818760a99f585237caa11b6e8dea4d7423ab952e9a75ef6590a28a35418be642f25909680cdba3f8198e4d472adf5279bf3972a06db921dcac6e514aa735eff6","ssdeep":"","tlshash":"56617b682a141ef898de147df32f776e757324f2616104c1872c9cb80e79a4c916de2b","size":3376,"data":"","first_seen":"2025-09-06T15:08:26.801719Z","last_seen":"2026-08-13T22:40:28.92897Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/main-m365.ACSHASHfe9d5283cc0a38f995b64bf0f39192eb.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c77057c15cd640811c2ae3c149816e28","sha1":"53af297c06063a67fc8abf140315f57e6d86dc8f","sha256":"5edbb203d881abf8341877b36f1e99154655a87e2714dee654e128eaf59e6957","sha512":"3450dfe61ac368d0be61a898c1948d385918d38c920ee373a601087b8ca0a4a3dcfc972820c37863dc84f3304993b8e2b90a7c17f566aaa7f13961ea242615b4","ssdeep":"12288:wDxREkZQKdaFA/RIc3f+u2wc/WVKSjdJjfMNlR48tmbK+2pA9XDTotHdN:EREkZQKdaFA/RIc3f+Pwc/6KSj7fMNlX","tlshash":"ad94c70837f2227640a7716e5fcf9101b230404f660add987dacdaa41f95a7846faff9","size":419608,"data":"","first_seen":"2025-06-17T17:33:16.33385Z","last_seen":"2026-08-13T22:40:28.999089Z","times_seen":939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASH6734c5d7a732130b83c7d4a6ba54dcec.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6734c5d7a732130b83c7d4a6ba54dcec","sha1":"31f7a0d4d020dced43bcd613aa98f22eadda2f9f","sha256":"5fdbebc9071a728298e820e2fb1ff71aebf33c9c91069fa51fd5cd870f55f093","sha512":"405358fffc4e02ef04e4bc59a41e1b8330693a34ae2c2635435ce09538e376050a34ff250427b5809de9264e533288f79f173e78b1675171faa8c42c48c8f74c","ssdeep":"","tlshash":"b7e0eb383c91f0313f9a8ee7c27afacf79e4c923740c904410c48d9228cc2091ba0266","size":296,"data":"","first_seen":"2025-03-09T08:38:15.190475Z","last_seen":"2026-08-13T22:40:28.882341Z","times_seen":2992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6c7d2d43c84b5224c17e2d22da9ea5d","sha1":"d232fc8199c944a62c95d4382baa9ebed575dacf","sha256":"925180960897370437c14c638fee0cef085af6f7d13d77f361f0408c9cc1bbfb","sha512":"802183191579eb1210f6d857ffc1ffd7462a2d2b001c22e68b6a2041d16212a88ecbaa61fb22d5acf11b9d27927f9bb90e913362d6ac41754524b5094942e838","ssdeep":"","tlshash":"899002505baea14b8411541aa516a95c399789af61017a9a30045105626d19b8919060","size":55,"data":"","first_seen":"2026-05-04T02:18:33.448135Z","last_seen":"2026-06-06T11:31:41.088779Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"75d0cb3e9ff9fee40f5ce5fd93c17fb2","sha1":"4cf20fc81a4125eb2b8830665f0c36b12c0d173f","sha256":"a60767ad70a8092a0388abb199aafaaf61fd70772aa41cc878a18ec9dbb80ffd","sha512":"cc51a0cc7b9eba6c7e3c220b191370f82b2458d248e7ee7ed7c81d1e222bd96e3e8fa238cafacfbb64da1cb51d3538509c938b19d9e20e2a913f827af257fbf0","ssdeep":"1536:7B4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:7qxNrNG9FnHKD/oIKq6Tjv","tlshash":"119319edb6c771628ba734b850bf010bf1bb599ab04c8850f055d4e4bd74a4a50bbf2d","size":92949,"data":"","first_seen":"2024-09-19T19:36:04.099549Z","last_seen":"2026-08-13T22:40:28.990951Z","times_seen":3118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc6e770638f9b3d3b3d3d6c12d85fe84","sha1":"755780e20a8bce3cbb6934e672edd7e3ece6c570","sha256":"ecc1b41433ef61f64988d69dd78ea3e67fd01a531b0626a7ac3d10e45d0d076c","sha512":"80d1e932652f8973033fa31592ac5f615e6bb805b730fbd6ee94dfecb866e98bbc71de606c0f22f007ed6156e93843e759bbb554feb3d4e5f69f10de546e29f7","ssdeep":"","tlshash":"caa02200032a028f80202028a002a00c3a8f8eef22003a8a20000003222c08ac800020","size":61,"data":"","first_seen":"2026-05-04T02:18:33.450015Z","last_seen":"2026-06-06T11:31:41.091097Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf880242325f20f5b8644293f4586135","sha1":"6135c0693044a885dbcfc2efdb5c0e553a2592bb","sha256":"b8fb5caf471b50a81f1e5f1d511b88260385b170d146b8f5c4c23ee32bd64afe","sha512":"2299e66d9c4f68ddbd83231dfd0992fbffce28322288166832d1c3bad42b21acfb9f6d9dee74436597686b2b45cec8963a51cc76c1e90aba60cd261e1438f394","ssdeep":"12288:gk4Dhe6otWg+8aQ/n0b3cInyFtVRCy8BYyFVBZ5vfDg53WFQdLyPcTzLGssFBA3F:gk4DheLWg+8bzewONqSum8np","tlshash":"3b95189ede093c6cfb583223a8ce36e2516ca7871c535858d00ff68b04e4e5d57e4a6e","size":2047622,"data":"","first_seen":"2026-02-12T21:58:47.358638Z","last_seen":"2026-06-06T11:31:41.093563Z","times_seen":809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-site.ACSHASH9f85878b5631614b30d294cd71fd6b3d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f85878b5631614b30d294cd71fd6b3d","sha1":"75c166700f43f90ef7d3dc2d474a71c6b8c27cb3","sha256":"f531cfedb50cdcc03ba80a30f2ba776a5ddbac1c8375f41931c685f7c66c8123","sha512":"7121f6e73aa00d17f0ccec47418bd7098726cd709b0bbdddbb0c2ad9db2b220529f87078dfe03241e285e3862b1b73d605e0fee987adadd130e63ecb95c54729","ssdeep":"","tlshash":"77e0687cf0066a95411ef3ad242f9281b462a8369b452fda441ae3918e284c904d3a8b","size":375,"data":"","first_seen":"2025-09-10T10:42:05.034402Z","last_seen":"2026-08-02T05:43:56.301254Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-jquery-cookie.ACSHASH5c75a4fa9fb3503322f8a0c9dd51512d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c75a4fa9fb3503322f8a0c9dd51512d","sha1":"0a0c83a0501b798860c7dc5eb6ff55281a07fe0c","sha256":"c1eca656aa4a0097bcce33e22e8d3cdb25ce8197139a3d711a2035bd50e59da6","sha512":"f791e66d8a87b165679d0d8f559e4fa132db181a59c15a69d085cffbf6166b1bb7fdfde1b92361dc69f1c1672d00584b653b0cce6856bfa5b1912964721d7a4e","ssdeep":"","tlshash":"392176d4704b78474a265b25727f042a70fdae0195cd9849c601d5e07e31e031971bf5","size":1405,"data":"","first_seen":"2024-08-20T06:21:21.210494Z","last_seen":"2026-08-13T22:40:28.93685Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f447a3bec111f76c9a68c9b8507682c4","sha1":"b1bb1cba1a8778813f95ffd72b6d0f990f2ba3ce","sha256":"43fa264cc1f4881ec67a6e41aaef15c6ccf154019dd87949a32e741ae00204a3","sha512":"e3561ba3c3decdbcbf283f0f23e9e420ff78aa3c6c5ba42be014a50a336f9e4e2cd0637f9b10e32145721526d24190f54fa40c91e937bc7088606888ab1ce64b","ssdeep":"","tlshash":"2ea00244a4f81546585a9b20c91629841ed8082ed50415c23795e66113d547255541a6","size":62,"data":"","first_seen":"2026-05-04T02:18:33.451715Z","last_seen":"2026-06-06T11:31:41.094583Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH9455de77e3cdad08bf293f5b5ac4163a.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"9455de77e3cdad08bf293f5b5ac4163a","sha1":"db02196989c1553990032df2507f967c90e46e72","sha256":"672bdc674c2d5c4c42abdba3659b75878d55d8f60814f900eab877f29a484e3e","sha512":"001a21c029daa47703fc61a30a32576583f077cb7e72705af638081ae07f363417f6ab89f800fd740f99d52ae3a159cee2fd5c1eebd20c4a4daa6bc3a2e8182e","ssdeep":"192:XbLMelZ51h456aeFY+AfCpwUjc7H+hsJa:x4peefCuUjYHw","tlshash":"62f1d9d872b1f4b1527661d2933f634bfbb968b6988cb490d13acca07e64604006bf69","size":7718,"data":"","first_seen":"2026-02-25T06:18:41.423174Z","last_seen":"2026-06-06T11:31:41.053894Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/publisher.ACSHASHd04116a7de4f2a26cdce768dfe83c5b0.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d04116a7de4f2a26cdce768dfe83c5b0","sha1":"83a51ad446f944c97493022a32cdc51a95b3fd34","sha256":"2b3c1170ccac9b1e2b0c70a6d2a6d8c290cc55f3d7eea099b13d172289553b67","sha512":"ea8440395285519dc7fd4dd6f8f71357c01f01120606085642eb9c8e4d21b2223ea754fcd324e395b8acaeff27105c313ba4a204c152e0c18fd48bf5f74a9bea","ssdeep":"","tlshash":"130178c3d8f4a89362377ca5ea048790e146b35703c8ac447ede85bc5f573930b116a2","size":657,"data":"","first_seen":"2025-02-07T17:08:29.255155Z","last_seen":"2026-08-13T22:40:29.002Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/isv-redirect.ACSHASH4fe566c049f9a2018cb50b843c891d28.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe566c049f9a2018cb50b843c891d28","sha1":"5efcf3d33cc402a1c1773a4cf4915061139d3298","sha256":"e30120a3c5f11d64fb882d86d030aa3ff6ad632f3184afdd280b28a19caadb5d","sha512":"98a4e626fbcd04ce5b809b8e8c78a8ae6f49e8199aa4f460be0baa5dc40fa56d127ae746b92ab03a387d10fb2a424d2de305bc170d8c58af344cc80fa29e6e50","ssdeep":"","tlshash":"3b413340f1b2342551e342754da3e218a331e00f3529e9c93b8d429d4f9ad6f91a3ef9","size":1980,"data":"","first_seen":"2025-06-30T08:18:03.004622Z","last_seen":"2026-08-02T05:43:56.297169Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-cookieconsent.ACSHASHc892f451b0c4db9c8ab2601a427c9b2c.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c892f451b0c4db9c8ab2601a427c9b2c","sha1":"420faf75711481c1112d7700385779e87930e875","sha256":"389377dda2f9b7a9ef203764c0e8d2a7b22f02158e98f90a74d4bae3c52cd9d3","sha512":"480617aa121e9f6902203265118f775eabd9785cbe7f8e9be7d808eb97f871542402e081c6e874a029d970c51701da0cb57ac75928d854300303de663ea30b97","ssdeep":"","tlshash":"f0c08c2336c2030853fb0371610f0205f20062faeb9c023e1a6025b009a0f2236fcddb","size":162,"data":"","first_seen":"2025-03-09T08:38:15.184278Z","last_seen":"2026-08-13T22:40:28.930685Z","times_seen":3124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a524381cfd41a23a665d6a325c6f129","sha1":"7d51e33401ac5119d173e66467301153ca77524b","sha256":"fa8c60611a57dd31cf897c48e5cd31e25fdddb93d4afbb18fdeb0437243d6fe3","sha512":"fdcbc10662d35b4bddcc71f18a4aeb56e06da01fbc8b3cbd3642c6cc658e69106626d1a9d2a709433ab27456d989b7eb1111d5a06dd09a105fd6d8f064129a93","ssdeep":"","tlshash":"e6018eac612489b711fb199ab10fa38071f1646bf803b9e4240d8c5c6aedfdf0e22d81","size":799,"data":"","first_seen":"2025-09-06T15:08:26.795453Z","last_seen":"2026-08-13T22:40:28.960571Z","times_seen":782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-onecloud-util.ACSHASHe27d1f017cb64db7f5a2a53fe34faf64.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e27d1f017cb64db7f5a2a53fe34faf64","sha1":"795eab7cd51acee60158f8938c5ee63b47e2efa2","sha256":"edce1c270b17547cb4353cb02df79ab58147a7566fe4ccf6e5df4423adde80bf","sha512":"c9984eb59da79661602aee8868526869dbe8f8b3e1ce83ab2cda43226f3d13f0d540fcd24722cabf32ce90aef15e40cb5d28bf2f2a194fe4a0d4deca800e9b96","ssdeep":"96:2VZw3gPuCrA3bm7+qWtNmOy47ZhiqdZCOkhZvRT0xZtCE13FMksINza0IMqiEd:2VZ4gPuCQbQ+qWtMOL1hiDOkhZotCE1K","tlshash":"e5b1b4863af12062177b604e838ba0c0b735e16f3a59189579ce5a141f9cf3c96f67c4","size":5219,"data":"","first_seen":"2025-07-24T21:09:08.971375Z","last_seen":"2026-08-13T22:40:28.901028Z","times_seen":919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASHbf7b336dbb370c984e1bf59b1a980d86.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7b336dbb370c984e1bf59b1a980d86","sha1":"211af3409d0b55895db1a07b4a44eae3625656a0","sha256":"073e2e07e5841b9794b4995169f2fe353389a5ccbe5d1a8365c4fd6a55b79b9f","sha512":"f331bed584f7dd98d27d06ec6bba90d47caf2578467eadb9049c1d00a2947aa50e1686915572531079e18126fc3fce588b238f0803731310ca5f69435f82a831","ssdeep":"","tlshash":"d4311055fa89f01107738666af9f150bf134e61163c4f3b09380e1927ea079f9993acb","size":1703,"data":"","first_seen":"2025-03-21T20:40:09.947475Z","last_seen":"2026-08-13T22:40:28.987512Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b81fa6fcebf12c0cbe7027907ac29e8","sha1":"4f6cf37abf97c59c8b2a7d0ec98ec59fbab34675","sha256":"72ee2e877450dff4ac46cd196aa5d7d9ed6ed736c7e0dc4daaaa4d0d7d4d6ec2","sha512":"4a77b18f1700bc3164d3d7444aca45f9c86c51ac50c3a7b829f347ec12d6ad926492667bee72830b9d6b14f7626111bba959bb802e2f24aeefd00553a57281ed","ssdeep":"","tlshash":"438004c4144105d4c7341430d55d15501150c07c40551431d4410105500010f41045f1","size":37,"data":"","first_seen":"2023-08-13T05:26:01Z","last_seen":"2026-06-06T11:31:41.096996Z","times_seen":3541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH953fdc4a1b669bc4fe0cefcf753f55be.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"953fdc4a1b669bc4fe0cefcf753f55be","sha1":"4d6422bb8329342041f3532aa08a4da45b856601","sha256":"a9f9687ad65d04ed4f9a1f1913f485a636fc22ee2dfc16dc6836c4215a769a70","sha512":"c58996ec8fb3014865d132f288d90677a871c15989325fd9b3ce3d941f645a1050ba0233c5712a9bf8096eb218c4ba6a156dd6e1ee49e51df5196dfb2c418ea4","ssdeep":"","tlshash":"8c3130d8fb94307611a325f1853f124b73b514b01a898d90a256c6fb5d7ce5c6c13f9e","size":1458,"data":"","first_seen":"2025-07-31T11:53:57.384567Z","last_seen":"2026-08-02T05:43:56.269364Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v4.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"13fd9629bb529ae56f57e20241f719bb","sha1":"f544e2012677ca473bd7aebb67d5d8c9c97c85e8","sha256":"c98282028c209f79a8d3880dab8555a8f0c24f90e477d94a67f7cfa3ed003e74","sha512":"69407f98f83eeb297f6cb2b2921edbab4ec5614cabb351e50e69a1b0eaf3b2cb9dd062fce99fde4b7ff20532ce499b70b3daa3b19aa7d482db268b05b75ff4a3","ssdeep":"1536:IMYT4Pkz00iK7EgmrawceNnYVVsK0mCVTywlJOPtpDiYKtJhcvfDv:IMY6g2phYVVsK0jVgVKuf7","tlshash":"8c63e7e97681703503a364b6203f610bb33b6a69690f8154f118e4e53dbde9e8637f6c","size":72101,"data":"","first_seen":"2026-05-01T01:51:19.960973Z","last_seen":"2026-06-09T15:27:59.744431Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-cookievalidator.ACSHASH76e71242540c0cc57446a6ee16fe9f52.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e71242540c0cc57446a6ee16fe9f52","sha1":"fcbee5e86b4872cb32ed85803a442fb98d18d7bb","sha256":"b402cd52326ecd1c4a8cb19f8b6bcc49470f7b87f5b1ba3c230375fd7be5ba69","sha512":"c1583582b27f6a16585d2ddb78c431eed40c72e5b4ba73fb48551b65785176e7bc9252bcc1f62792725188fd2c04a794e3f8014f5d82716b6e4d45bbaa3e088d","ssdeep":"384:cwLbQmTUzbLeufzbLpAyRZpe48hBZ1YcOfPro5:cwMbLh9Bs48hWM5","tlshash":"8492831e2de761354573743ca79fa048b22292171019de447e8cd7a84f62b3a9af3bdc","size":20806,"data":"","first_seen":"2026-01-08T20:07:21.777429Z","last_seen":"2026-06-20T19:37:48.960555Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-httpclient.ACSHASHbdf4e043fe12e5b0add3f5e1e82ea4c5.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf4e043fe12e5b0add3f5e1e82ea4c5","sha1":"45580163c58d85a128a5113a776dfcb84c9d3838","sha256":"f9cfec2fe0fdbbb3b30478f2fa9af520773b84e8ba9cc38d4391ddeedec61430","sha512":"e35550d3c04bd0aa2938370076e237e3fce829d7c8f030c5e64fa26dca08bbc1a85e2d2582713347c2473bde7f517c7515a9ef8a920e1f620acb2671f8790e0e","ssdeep":"1536:0lhh3t2L5CR7zwmceC9jcrtO3y2C780XzfMEu3L4D:6hh3aSnaeC9jcr9BQ4D","tlshash":"2473b6d8b2e2b060036375b4812f110bf73e687aa44c54a4f168e8d67cf544d967bfb9","size":77957,"data":"","first_seen":"2026-04-29T00:43:17.637554Z","last_seen":"2026-06-09T02:42:28.340475Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/main-m365.ACSHASH073a932f7683246e6f21d89e199af76d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"073a932f7683246e6f21d89e199af76d","sha1":"010d3461938390bab455f71a5b82f2f10e8f9e8b","sha256":"0317fd5b4b43a5b2b9c3440f71a735bc76fe226de615394c11c01bdc62f8f40a","sha512":"66a2109bc154a8852545b97bbb1d1c66a01482a84caa1c1d7d267b200e552f838f12efbb4dd3ecc985a09e38986f2fb7cc10ba58dbc29e2e0d42f9df0f65017f","ssdeep":"6144:qgSeMD345NZo/X07dQUE+ZofrT0NOJ9Kywr5p5v5bIGwRYnnBPePU4s5rZCig:4Da8r+er4UK7p5viRYnY05rZCig","tlshash":"f6c439fa7741b73b55e27728812b518f766daca5e844806c7ac7ccde2ca4d06013ebb4","size":575649,"data":"","first_seen":"2026-01-22T08:24:45.957346Z","last_seen":"2026-08-02T05:43:56.304855Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"02284d956e90a6eb7d2acfafaf790b90","sha1":"9c879d8a9c377ab693b909548b18c3846bb6a587","sha256":"05d14ca7aab09347063692ac7b68c939e9a4592fd2806ec76bdc3dc5609c0e56","sha512":"1603ce6071cf76deb09121dfbf864342981e45e5f63627b68758edf76a66244a390ffea9a862eb73b56a0015862bbd213cdb1fa05a48cfc755c3c96d09d0f70b","ssdeep":"","tlshash":"dd0176683cfaa08c0025605d5fabc20074712d17354bccadb3ecaa351f42623ee575ab","size":739,"data":"","first_seen":"2025-01-24T13:20:05.749504Z","last_seen":"2026-06-07T06:24:15.916384Z","times_seen":5884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkedIn-29?scl=1","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/LinkedIn-29?scl=1 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 12 Jul 2021 19:15:56 GMT\r\netag: \"056f2a3100e2202498622286a5ef3042\"\r\nx-adobe-smart-imaging: 227\r\nserver: Unknown\r\ncontent-type: image/avif\r\ncontent-length: 593\r\nexpires: Sat, 06 Jun 2026 16:15:25 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":593,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"056f2a3100e2202498622286a5ef3042","sha1":"8dfcbeafa96f044c97e72db48a4bfdaae3397daf","sha256":"19812d572cd1a5d2c0eda87947faa5ad82a7ab4f3062835fbef213a2efda12d1","sha512":"3a38427157ad9bfab2f335e4a829279d3c9aaa4a38cdefd0846f134fe4e011ec9306096b30c8f861baa7b7e70653edff5c94fba74f43bbc62a41f8ddf433b9a8","ssdeep":"","tlshash":"d9f0c938b3a22e81e8194339595b431a0806e13a27ebf80eca597b28de215ff4c05fd0","first_seen":"2024-07-30T03:33:51Z","last_seen":"2026-07-28T16:03:08.09896Z","times_seen":192,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":61,"dns":112,"connect":1,"send":0,"wait":16,"receive":4,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-onecloud-util.ACSHASHe27d1f017cb64db7f5a2a53fe34faf64.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-onecloud-util.ACSHASHe27d1f017cb64db7f5a2a53fe34faf64.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-1463\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e27d1f017cb64db7f5a2a53fe34faf64","sha1":"795eab7cd51acee60158f8938c5ee63b47e2efa2","sha256":"edce1c270b17547cb4353cb02df79ab58147a7566fe4ccf6e5df4423adde80bf","sha512":"c9984eb59da79661602aee8868526869dbe8f8b3e1ce83ab2cda43226f3d13f0d540fcd24722cabf32ce90aef15e40cb5d28bf2f2a194fe4a0d4deca800e9b96","ssdeep":"96:2VZw3gPuCrA3bm7+qWtNmOy47ZhiqdZCOkhZvRT0xZtCE13FMksINza0IMqiEd:2VZ4gPuCQbQ+qWtMOL1hiDOkhZotCE1K","tlshash":"e5b1b4863af12062177b604e838ba0c0b735e16f3a59189579ce5a141f9cf3c96f67c4","first_seen":"2025-07-24T21:09:08.971375Z","last_seen":"2026-08-13T22:40:28.901028Z","times_seen":919,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlibs.ACSHASH4402231c6c651d105bb28a0781aa644e.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlibs.ACSHASH4402231c6c651d105bb28a0781aa644e.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-a9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4402231c6c651d105bb28a0781aa644e","sha1":"8fd18b4a4985b193495ec9a9f1877702d4c5bfd2","sha256":"9fdac1ad37e90a50b6c9b69d852cca7aec979f64617d7b1d089ae8fe7ae72f1b","sha512":"b8e5e1029c460d3f12e4d23cb7f024026c39af97d2fbfeed9ed62722d8757131383a632e69e25cac1105978bbcd5604aa1fb7c6bd3454dde1111092a5a4af2da","ssdeep":"","tlshash":"79c080f055540d53f7630494b0d05cd2835cf04315f47741748c41855055cd35017102","first_seen":"2023-07-21T13:29:28Z","last_seen":"2026-06-06T11:31:41.003214Z","times_seen":146,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/8f-61bee0.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/8f-61bee0.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-22d52\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41522)","md5":"1db952ac94215b6a808fae736bf78e9f","sha1":"7cfbad228dfdf9f8f08ff965ca0ac50795f294ca","sha256":"5f229d2c8cf661edd55acc6fc9bed3a0ef8c3d97830de0c2eb7cee0d9dd86a78","sha512":"8d8248298413ca9322755ece43b77be2778f20b1a470fd760b1dbea484c5338d1c6d15ce157012817bde6f05ee282c6c329dd1819573b9bc5cf407954dc84c2f","ssdeep":"1536:pfwV8gc49fjDAKKuFepxhXaOG+59gkpCIlIX8BJWxFush9whY8dOyd1EwgXA7GR1:pf4KuFepxnISCI9d1EwgXA7ViVEMK/0/","tlshash":"bdd33ca9b15835768bdf50fc978f1408b2334429988a6458b82cdded1878e4f21b7ff9","first_seen":"2025-12-11T05:05:37.265819Z","last_seen":"2026-08-13T22:23:06.981045Z","times_seen":1822,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/msocbody.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/msocbody.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-2ad88\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3336)","md5":"326028b8f0833e2e8b2f49c4bd267ce8","sha1":"8127f49479063da154926df98ae006810a2f3f97","sha256":"b603135020e397e5315a96cbcb5f6192d90e9e96209307eeb787ed4ba9ac917a","sha512":"7e033f46bc49e08b1fc7cf5b97b57fd5eb547badc352bc8384a7ba4d200476eb0910255d1672b0465b52999e78816ca15ac4346bfc73ca318d3358f5f2049b5a","ssdeep":"1536:J0tWbQ0IWRSv9mTGU508Gku7nufKdwdL4/aC9Mj1FWerIj9uVbxdu6Dx36HMEHm1:WWbQ0I9n60DkuzuL5J8zqZZ4BiZN","tlshash":"2d042b74b250147786ef12ab629ab3c07b682097b500d495745dcc0d1fdafca20b7eee","first_seen":"2026-04-29T19:09:13.734466Z","last_seen":"2026-06-06T11:31:41.006064Z","times_seen":20,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/images/RE1Mu3b.png","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /images/RE1Mu3b.png HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-fd6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced","md5":"9f14c20150a003d7ce4de57c298f0fba","sha1":"daa53cf17cc45878a1b153f3c3bf47dc9669d78f","sha256":"112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960","sha512":"d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487","ssdeep":"","tlshash":"d0816d07ff018801919ee9570485507acb618cd1e7f91061a987c825c9b5cf82abcde7","first_seen":"2023-04-05T04:39:01Z","last_seen":"2026-08-14T00:32:25.658713Z","times_seen":12291,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-cookievalidator.ACSHASH76e71242540c0cc57446a6ee16fe9f52.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-cookievalidator.ACSHASH76e71242540c0cc57446a6ee16fe9f52.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-5146\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20806,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"76e71242540c0cc57446a6ee16fe9f52","sha1":"fcbee5e86b4872cb32ed85803a442fb98d18d7bb","sha256":"b402cd52326ecd1c4a8cb19f8b6bcc49470f7b87f5b1ba3c230375fd7be5ba69","sha512":"c1583582b27f6a16585d2ddb78c431eed40c72e5b4ba73fb48551b65785176e7bc9252bcc1f62792725188fd2c04a794e3f8014f5d82716b6e4d45bbaa3e088d","ssdeep":"384:cwLbQmTUzbLeufzbLpAyRZpe48hBZ1YcOfPro5:cwMbLh9Bs48hWM5","tlshash":"8492831e2de761354573743ca79fa048b22292171019de447e8cd7a84f62b3a9af3bdc","first_seen":"2026-01-08T20:07:21.777429Z","last_seen":"2026-06-20T19:37:48.960555Z","times_seen":373,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/latest.woff2","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/latest.woff2 HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/ae-f1ac0c.css\r\nCookie: MicrosoftApplicationsTelemetryDeviceId=7eb0b534-b286-4cb3-91d0-af7815477377; ai_session=mTrvebPEcrSg0IyoHuxj5C|1780745466300|1780745466300; Cascade.AuthSSO=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 34052\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-8504\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-08-13T22:40:29.013181Z","times_seen":12708,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-site.ACSHASH9f85878b5631614b30d294cd71fd6b3d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-site.ACSHASH9f85878b5631614b30d294cd71fd6b3d.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-177\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (375), with no line terminators","md5":"9f85878b5631614b30d294cd71fd6b3d","sha1":"75c166700f43f90ef7d3dc2d474a71c6b8c27cb3","sha256":"f531cfedb50cdcc03ba80a30f2ba776a5ddbac1c8375f41931c685f7c66c8123","sha512":"7121f6e73aa00d17f0ccec47418bd7098726cd709b0bbdddbb0c2ad9db2b220529f87078dfe03241e285e3862b1b73d605e0fee987adadd130e63ecb95c54729","ssdeep":"","tlshash":"77e0687cf0066a95411ef3ad242f9281b462a8369b452fda441ae3918e284c904d3a8b","first_seen":"2025-09-10T10:42:05.034402Z","last_seen":"2026-08-02T05:43:56.301254Z","times_seen":315,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/latest_3.woff2","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/latest_3.woff2 HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29388\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-72cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29388,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29388, version 0.0","md5":"6e75a94d5f7170a1ab532d32c2a35755","sha1":"9c1b6fff544089941bbeddbcf529c3f0b46d853a","sha256":"d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f","sha512":"27cdbf98a3f42510eaeb28437e3c4661734b685d63eff5e47364ac46b73de617894edcb19ddd9afd955de192cfd8bb755998ed609ec2c279e9afab3db2583175","ssdeep":"768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e","tlshash":"f0d2e1ceb288a6b2cf6f2234d60344d63a3be647565d38b4adc49d918b20d0fe4dd04b","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-08-13T22:40:28.962658Z","times_seen":12002,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/MWFFluentIcons.woff2","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/MWFFluentIcons.woff2 HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/main-m365.ACSHASH5a1b4bc4da24b724c61e5fb9d4377d1f.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27652\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-6c04\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27652,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27652, version 1.28835","md5":"ca021ccd30ac383f134c6f4c6c9b905d","sha1":"5397761812c54a8eded0773843e3e01ae087bd8a","sha256":"175046e68ff8f49a59d8c9d3aa079bed92c6bbe9f17f311d298ae929fc87dfe5","sha512":"c7e661bb905587962a82d9a275346cd67a146112f069f0fd69c1517e9fa36ad1b32c6df2f701e1f8900d7736a94c44011290bed7dcfe12603934c45866848553","ssdeep":"768:7k/OvwqInzJQvOt1TOZ5aKh/ePgmuskVLeS319Cu:7kywqInzB1Kv2PgVN18u","tlshash":"4bc2e15e7831b06c9e40849e5db3b0bcf30b9bac1381c2b5db5ceea542a55180c7eb07","first_seen":"2023-04-08T09:20:52Z","last_seen":"2026-08-13T22:40:29.026505Z","times_seen":1211,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Twitter-34?scl=1","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/Twitter-34?scl=1 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 13 Oct 2023 01:20:49 GMT\r\netag: \"7cf5e36d5c77e91a387a3f24bd7476a5\"\r\nx-adobe-smart-imaging: 427\r\nserver: Unknown\r\ncontent-type: image/webp\r\ncontent-length: 926\r\nexpires: Sat, 06 Jun 2026 16:34:33 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084339\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7cf5e36d5c77e91a387a3f24bd7476a5","sha1":"1571745948be01cfb62ecb08fcb91aa4b095215b","sha256":"3d558977f35b8ed9e4def149b1fff81a0843247dd4897d0ced73a867b1c425a1","sha512":"1efdab3cce2edfe038e3777904c87403f30bee26b399d2dfbe0f7db491058c792b67d241ab05182d5ade86e7d549a8827cd04d317839f1b38b450ca81d30d856","ssdeep":"","tlshash":"4411b763f31685cbd3be9cc8176c8b080ca612da0b55578ed5af07f342a589f6376087","first_seen":"2024-10-14T23:47:00.602545Z","last_seen":"2026-08-11T17:29:35.512383Z","times_seen":214,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":73,"dns":109,"connect":7,"send":0,"wait":10,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Blog?scl=1","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/Blog?scl=1 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 12 Jul 2021 20:54:55 GMT\r\netag: \"419f88e695a62cec374cbbe759f11754\"\r\nx-adobe-smart-imaging: 346\r\ncontent-type: image/webp\r\ncontent-length: 502\r\nserver: Unknown\r\nexpires: Sat, 06 Jun 2026 16:28:47 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084334\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"419f88e695a62cec374cbbe759f11754","sha1":"69509ddecb1b082020907299471177772db59070","sha256":"2c13442d9caa9698d2d10443eb6f0cfc395dd220e60763ae0c3a4a6044db7603","sha512":"381537e55704202899317e4780520f66ec65c0f6cdf59633e61b7e880fb056379dfd539a3ca2c890bed3087dae0f56550071c7738b6f372bd0514531f31f2b49","ssdeep":"","tlshash":"d5f0540dcb57ca10ab57e98189ee02ac1c7317e60f4f051538cf149b1320e08a231c8c","first_seen":"2023-05-06T00:32:15Z","last_seen":"2026-08-11T17:29:35.551282Z","times_seen":519,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":4,"connect":6,"send":0,"wait":16,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/cascadeauth/microsoft-365/account/silentauth?auth=aadfirst","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /cascadeauth/microsoft-365/account/silentauth?auth=aadfirst HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MicrosoftApplicationsTelemetryDeviceId=7eb0b534-b286-4cb3-91d0-af7815477377; ai_session=mTrvebPEcrSg0IyoHuxj5C|1780745466300|1780745466300; Cascade.AuthSSO=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-14T01:52:05.627453Z","times_seen":550540,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlib-product-pricing.ACSHASHde5a77dc6cdb73df9c3096397924a3f0.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlib-product-pricing.ACSHASHde5a77dc6cdb73df9c3096397924a3f0.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-110\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de5a77dc6cdb73df9c3096397924a3f0","sha1":"4c8948d294f189077ae36628fee5ff6c8b3c5f79","sha256":"c691ab7286319bc87981a989f1726aae7da318cfe15c4f6f15b15ec13fe9e64b","sha512":"d1fe1a0555a7fbb42afbff9ca4a62174d0d690ab71c53b87b078e5fbda8c6b5530f33867c9d0dfe0c8d95f6cbb6d7bf85c6eb3d0c8f963479dfd1b0fc30c6020","ssdeep":"","tlshash":"b3d042cbf67d2acab013803049c97aa73c10252022a0093f8c25f9217e0e55236f348a","first_seen":"2023-05-09T23:33:16Z","last_seen":"2026-08-13T22:40:28.906762Z","times_seen":805,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASHbf7b336dbb370c984e1bf59b1a980d86.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/v1.ACSHASHbf7b336dbb370c984e1bf59b1a980d86.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-6a7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"bf7b336dbb370c984e1bf59b1a980d86","sha1":"211af3409d0b55895db1a07b4a44eae3625656a0","sha256":"073e2e07e5841b9794b4995169f2fe353389a5ccbe5d1a8365c4fd6a55b79b9f","sha512":"f331bed584f7dd98d27d06ec6bba90d47caf2578467eadb9049c1d00a2947aa50e1686915572531079e18126fc3fce588b238f0803731310ca5f69435f82a831","ssdeep":"","tlshash":"d4311055fa89f01107738666af9f150bf134e61163c4f3b09380e1927ea079f9993acb","first_seen":"2025-03-21T20:40:09.947475Z","last_seen":"2026-08-13T22:40:28.987512Z","times_seen":2063,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","fqdn":"js.monitor.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"150.171.109.200","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.monitor.azure.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Sat, 25 Apr 2026 05:16:47 GMT","end":"Thu, 22 Oct 2026 05:16:47 GMT"},"fingerprint":{"sha1":"6A:EF:17:AE:5C:78:07:D9:A4:3A:F9:EC:41:25:32:CB:58:F6:E8:87","sha256":"92:F9:74:3C:B1:14:8D:64:88:89:27:6B:E1:8B:F1:71:B9:B6:F2:6A:C2:12:13:9F:44:DB:64:2D:51:91:D2:74"}}},"request":{"raw":"GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1\r\nHost: js.monitor.azure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform, public, max-age=1800, immutable\r\nlast-modified: Wed, 05 Feb 2025 20:35:46 GMT\r\netag: W/\"0x8DD4624AB24003C\"\r\nx-ms-request-id: 124fdd12-601e-0058-50bd-f2f8c5000000\r\nx-ms-version: 2025-05-05\r\nx-ms-version-id: 2025-02-05T20:35:46.0518732Z\r\nx-ms-is-current-version: true\r\nx-ms-meta-jssdkver: 3.2.18\r\nx-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js\r\nx-ms-or-policy-id: 6437dba7-5170-44ca-b9b7-c3a660a5c205\r\nx-ms-creation-time: Wed, 05 Feb 2025 20:35:46 GMT\r\nx-ms-blob-content-md5: z1zH9LV1Jsw3iT3Lg97QMQ==\r\nx-ms-lease-state: available\r\nx-ms-server-encrypted: true\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-version-id,x-ms-is-current-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,x-ms-or-policy-id,Content-Type,Cache-Control,ETag,Last-Modified,x-ms-creation-time,x-ms-blob-content-md5,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,x-ms-server-encrypted,x-ms-access-tier,x-ms-access-tier-inferred,Accept-Ranges,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260606T113106Z-r1b44c7fb77n2qh4hC1SVGs4340000000770000000002006\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":91802,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65394)","md5":"cf5cc7f4b57526cc37893dcb83ded031","sha1":"e953783be0a7894585778455aae3d0df094d6f29","sha256":"3a790b6c0d26d7a4d292cb27f992eafaff42c37e9318b2ab704207039127fcb8","sha512":"2320f9d7811cd773c1e5c2e95a31b39e9ff62a2fa7ca431975873dab57ae42a75ba720d15aeb47fa2ea127d0766eb5aa15040cffd04bf7a8cb8bcd7236069c40","ssdeep":"1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn","tlshash":"d793f7cd71c2f066426b7075907f110fa33f5995384c89a4e22ae4d93cb986e9367fac","first_seen":"2024-07-01T20:35:42Z","last_seen":"2026-07-22T21:53:54.710675Z","times_seen":6874,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":214,"dns":112,"connect":21,"send":0,"wait":28,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/blade01_hero_img?scl=1","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/blade01_hero_img?scl=1 HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 21 Dec 2022 18:28:11 GMT\r\netag: \"c378c730d2320d40aaabb68060d70949\"\r\nx-adobe-smart-imaging: 57086\r\nserver: Unknown\r\ncontent-type: image/avif\r\ncontent-length: 93259\r\nexpires: Sat, 06 Jun 2026 18:29:09 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93259,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c378c730d2320d40aaabb68060d70949","sha1":"a6b053e55abbe04dd387598edc4e09486c573253","sha256":"845cc4c5c35a2f781ae5adcfefd4f073004fa4ee2f8727666047bdca8c72dbf8","sha512":"4cbc4d00b3ae20096bba30314d299f650e49f426d83ef9709af5af1de15f884f89b327d9e41b5b781c841f58da5e0d77a9db28a22b5c20f8e82fd47d6df3dba4","ssdeep":"1536:4QCpVMjOTo1Igk/bjhu/IMSAxqTX7kzjHLPsdr8eOeusFck0Z+2sDKmse8+kcS:XClk1IlB6XtxuLcjHUbNusFho+kcS","tlshash":"fc931224eff7e5899c08087164ae3a8b433542e787dbfff03618569c92ac857385c746","first_seen":"2026-05-04T02:18:33.434083Z","last_seen":"2026-06-06T11:31:41.02574Z","times_seen":6,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":49,"dns":3,"connect":1,"send":0,"wait":9,"receive":7,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-events.ACSHASH4c28b55b872280fe389b01920b5c9315.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-events.ACSHASH4c28b55b872280fe389b01920b5c9315.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-d30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (545)","md5":"4c28b55b872280fe389b01920b5c9315","sha1":"8db22267b4be133a20b949fd7c8770da63046150","sha256":"62c958e5797af584fdf1a430183aaed9f323aded640a5d2c7aa73d67bf72794b","sha512":"818760a99f585237caa11b6e8dea4d7423ab952e9a75ef6590a28a35418be642f25909680cdba3f8198e4d472adf5279bf3972a06db921dcac6e514aa735eff6","ssdeep":"","tlshash":"56617b682a141ef898de147df32f776e757324f2616104c1872c9cb80e79a4c916de2b","first_seen":"2025-09-06T15:08:26.801719Z","last_seen":"2026-08-13T22:40:28.92897Z","times_seen":843,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:08.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.18\r\napikey: 1cfc1aff02e4437889594f14c4cad289-5bf9ec06-73a3-4827-a5e7-d709ff3d3b12-6941\r\nupload-time: 1780745468334\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 13285\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13285,"data":"{\"name\":\"Ms.Web.ClientError\",\"time\":\"2026-06-06T11:31:06.399Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":2,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.0\"},\"metadata\":{\"f\":{\"baseData\":{\"f\":{\"severityLevel\":{\"t\":6},\"properties\":{\"f\":{\"lineNumber\":{\"t\":6},\"columnNumber\":{\"t\":6}}}}},\"lineNumber\":{\"t\":6},\"columnNumber\":{\"t\":6}}}},\"data\":{\"baseType\":\"ExceptionData\",\"baseData\":{\"ver\":\"4.0\",\"exceptions\":[{\"typeName\":\"String\",\"message\":\"SyntaxError: JSON.parse: end of data while reading object contents at line 1 column 2 of the JSON data\",\"hasFullStack\":false,\"stack\":\"@https://microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js:270:63\\n\\n\",\"parsedStack\":[]}],\"severityLevel\":3,\"properties\":{\"errorSrc\":\"window.onerror@https://microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js:270:63\",\"url\":\"https://microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js\",\"lineNumber\":270,\"columnNumber\":63,\"message\":\"SyntaxError: JSON.parse: end of data while reading object contents at line 1 column 2 of the JSON data\",\"typeName\":\"String\",\"version\":\"PostChannel=3.2.18\"},\"id\":\"da63997b-379e-40b1-b242-b1012e011878\"},\"errorSrc\":\"window.onerror@https://microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js:270:63\",\"url\":\"https://microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js\",\"lineNumber\":270,\"columnNumber\":63,\"message\":\"SyntaxError: JSON.parse: end of data while reading object contents at line 1 column 2 of the JSON data\",\"typeName\":\"String\",\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}\n{\"name\":\"Ms.Web.ClientError\",\"time\":\"2026-06-06T11:31:06.730Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":3,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.1\"},\"metadata\":{\"f\":{\"baseData\":{\"f\":{\"severityLevel\":{\"t\":6},\"properties\":{\"f\":{\"lineNumber\":{\"t\":6},\"columnNumber\":{\"t\":6}}}}},\"lineNumber\":{\"t\":6},\"columnNumber\":{\"t\":6}}}},\"data\":{\"baseType\":\"ExceptionData\",\"baseData\":{\"ver\":\"4.0\",\"exceptions\":[{\"typeName\":\"String\",\"message\":\"SyntaxError: Document.querySelector: '[data-mount=\\\"contact-sales\\\"] .contact-sales-widget:has(.glyph-prepend-mail) a' is not a valid selector\",\"hasFullStack\":true,\"stack\":\"@https://microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js:1:406\\nca@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:104:483\\nDeferred/then/m/\u003c/na\u003c@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:105:309\\nsetTimeout handler*Deferred/then/m/\u003c@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:106:3\\nm@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:101:343\\nfireWith@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:55\\nfire@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:91\\nm@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:101:343\\nfireWith@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:55\\nready@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:108:403\\ngb@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:24:449\\nEventListener.handleEvent*@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:109:26\\n@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:22:211\\n@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:22:218\\n\\n\",\"parsedStack\":[{\"level\":0,\"method\":\"ca\",\"assembly\":\"ca@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:104:483\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":104},{\"level\":1,\"method\":\"Deferred/then/m/\u003c/na\u003c\",\"assembly\":\"Deferred/then/m/\u003c/na\u003c@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:105:309\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":105},{\"level\":2,\"method\":\"setTimeout handler*Deferred/then/m/\u003c\",\"assembly\":\"setTimeout handler*Deferred/then/m/\u003c@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:106:3\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":106},{\"level\":3,\"method\":\"m\",\"assembly\":\"m@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:101:343\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":101},{\"level\":4,\"method\":\"fireWith\",\"assembly\":\"fireWith@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:55\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":103},{\"level\":5,\"method\":\"fire\",\"assembly\":\"fire@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:91\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":103},{\"level\":6,\"method\":\"m\",\"assembly\":\"m@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:101:343\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":101},{\"level\":7,\"method\":\"fireWith\",\"assembly\":\"fireWith@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:103:55\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":103},{\"level\":8,\"method\":\"ready\",\"assembly\":\"ready@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:108:403\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":108},{\"level\":9,\"method\":\"gb\",\"assembly\":\"gb@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:24:449\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":24},{\"level\":10,\"method\":\"EventListener.handleEvent*\",\"assembly\":\"EventListener.handleEvent*@https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js:109:26\",\"fileName\":\"https://microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js\",\"line\":109}]}],\"severityLevel\":3,\"properties\":{\"errorSrc\":\"window.onerror@https://microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js:1:0\",\"url\":\"https://microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js\",\"lineNumber\":1,\"columnNumber\":0,\"message\":\"SyntaxError: Document.querySelector: '[data-mount=\\\"contact-sales\\\"] .contact-sales-widget:has(.glyph-prepend-mail) a' is not a valid selector\",\"typeName\":\"String\",\"version\":\"PostChannel=3.2.18\"},\"id\":\"8950654a-5c9d-4b8d-afda-51c7fea5c754\"},\"errorSrc\":\"window.onerror@https://microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js:1:0\",\"url\":\"https://microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js\",\"lineNumber\":1,\"columnNumber\":0,\"message\":\"SyntaxError: Document.querySelector: '[data-mount=\\\"contact-sales\\\"] .contact-sales-widget:has(.glyph-prepend-mail) a' is not a valid selector\",\"typeName\":\"String\",\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}\n{\"name\":\"Ms.Web.PageViewPerformance\",\"time\":\"2026-06-06T11:31:07.311Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"web\":{\"isManual\":false,\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":4,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.2\"},\"metadata\":{\"f\":{\"behavior\":{\"t\":6}}}},\"data\":{\"baseType\":\"PageviewPerformanceData\",\"baseData\":{\"ver\":\"1.0\",\"id\":\"3545306a-64ea-4fb6-a994-832a0811ed31\",\"name\":\"Download Microsoft 365 (Formerly Office 365) for Windows and Mac | Microsoft 365\",\"uri\":\"https://microsoft365office.duckdns.org/\",\"properties\":{\"pageTags\":{\"metaTags\":{\"canvasType\":\"web\",\"isTented\":\"false\",\"cms\":\"AEM\",\"program\":\"golf\",\"enabledFeatures\":\"LocaleDetection;QspEnabled;contentbackfillgenerate;esiproductcards;feature-controlled-mwf;uhf-ms-io-endpoint;uhf-esi-cv;uhf-esi-cache;contentsquare;mediapixel;holiday-themer;lazyload-static-components;clientlibDefer;upsellEnabled;contentbackfillpkgdelete;healthcheck;contentbackfillhttpgenerate;perf-tracker-1ds;dynamic-bundle;cvIncrementer;tentingEnabled;chatCookiesImplemented;alertCountDownWithoutServerTime;pdpDynamicRendering;bundlesDynamicRendering;contentbackfillmetadatachangesvideo;contentbackfillmetadatachangesnonvideo;listDynamicRendering;experimentation-without-personalization;generic-list-importer;combinedUHF;cvCallEnabled;m365ProductCatalog;support-unsupported-locales;deferClickTale;videoLazyLoad;prefetchFontsEnabled;enable-code-isolation;imageLinkTag;fetchPriority;contentIngestionAgent;enableClickgroupTelemetry;imageLazyLoad;contentIngestionAgent-dispatcher2westus2Agent;isCacheControlFeatureEnabled;feature-controlled-content-card;lcpPrioritizationPhase1;ocReimagineTelemetry;deferScriptsEnabled;lcpPrioritizationPhase2;ocReimagineSlotNumberTelemetry;contentIngestionAgent-dispatcher1westus2Agent;ocReimagineComponentNameTelemetry;ocReimagineTemplateNameTelemetry;ptePhase1;extended-html-minification-sites;dynamicPrice;gl-auto-config;displayV35Toggle;chatCustomEndpoint;enableBoostPersonalization;ocReimagineTelemetryTemplateNameSwap;enableEmailConnector;enable-eventingService;ocReimagineAIAssistant;acsPMEFeatureEnabled;ocReimagineCustomerApiUrl;ocReimagineCustomerFilterApiUrl;email-FigmaEmailAutomation;storeVideoUmp;ocProductPricePrimaryLocale;complianceManagerEnabled;entertainmentEW;enableClarityScript;EnableCascadeAuthSDK;ecsMigrationCheck\",\"authtype\":\"anonymous\"},\"client\":\"AEM\"},\"version\":\"PostChannel=3.2.18\"},\"duration\":\"00:00:02.485\",\"perfTotal\":\"00:00:02.485\",\"networkConnect\":\"00:00:00.237\",\"sentRequest\":\"00:00:00.043\",\"receivedResponse\":\"00:00:00.000\",\"domProcessing\":\"00:00:02.057\"},\"behavior\":0,\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-length: 61\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ncollector-error: No events are from an allowed domain.\r\naccess-control-allow-headers: Collector-Error\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\naccess-control-expose-headers: Collector-Error\r\ndate: Sat, 06 Jun 2026 11:31:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e1c01827ecd5f505c03277b8e039b824","sha1":"690a51b4c152be6dc3780073f97016bc13c4110b","sha256":"0af00930d8936cced6f4ad75f9b97bd93379ac1a2a4efe0d9181ba79b0988b14","sha512":"d78960b963450dd6f021c63757d5845c2b18afea65651d8c9845aaa5f237a401a6f95b6bb5c989170bc7978459adef543b87d4d1b3c2ff7b22f193a440b40865","ssdeep":"","tlshash":"e6a0022b0e2165a1464555467ea959636146c0da6c601a96a810a6084b42abda55c408","first_seen":"2023-04-17T06:50:27Z","last_seen":"2026-06-06T11:31:41.030204Z","times_seen":46,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH69d585e01cb601a02e396b34fdcab8c4.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/site.ACSHASH69d585e01cb601a02e396b34fdcab8c4.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-4bf8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"69d585e01cb601a02e396b34fdcab8c4","sha1":"927b627d478c369fd3178ff317b8daefdec61615","sha256":"26b889bb3d6c0902cc83008d8e84efaac66d8e86f36bac303b45bda9ba6d7c72","sha512":"389be59360762166d0647d5089533f088c491cc228bfb43aa4f0450a10cb645e91755aec172b1242c995de7f51ad0739937096309839dbd0004265301a58c308","ssdeep":"384:aY6+cIDcPNAWti0aXo2johZHJjVka9kE0YuWcB4:yicPyWti0N2khZPku0YuWcB4","tlshash":"7092c8cc71e3f05552676065a22f230bf37d19bb988ca8409219e9d1bd78d1a8327fb9","first_seen":"2026-02-04T12:19:19.836251Z","last_seen":"2026-07-15T04:45:41.071059Z","times_seen":1502,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/sites.ACSHASH4bf64736153944008cd5ca16b7743b18.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/sites.ACSHASH4bf64736153944008cd5ca16b7743b18.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-2ab\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"4bf64736153944008cd5ca16b7743b18","sha1":"fab7692d6b42a8a2634936b0166a508967c72214","sha256":"b8a1680c63995046b5d4450f585e009235f89439aeeaaa05a14b1a55a69ab32f","sha512":"5cfcf1266d4b68159c7e66e270999b1a87d4d77fa1907ebfda4bea07f129c455c64f6e984a1c33d49387966261298f37facaff56b9739e7a80838b063163a51f","ssdeep":"","tlshash":"a401234a719994e1057f740e197bc92ef0b0467184dae1740083a47e3fbcaf40b63f25","first_seen":"2025-09-15T21:05:35.552333Z","last_seen":"2026-06-06T11:31:41.032011Z","times_seen":20,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mem.gfx.ms/meversion?partner=OfficeProducts\u0026market=en-us\u0026uhf=1","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 10","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Apr 2026 23:01:16 GMT","end":"Mon, 05 Oct 2026 23:01:16 GMT"},"fingerprint":{"sha1":"9A:65:0B:AE:1E:F0:90:D4:5C:35:23:B3:14:58:6B:A0:A8:50:0C:27","sha256":"09:ED:1C:90:23:D8:B0:E2:0A:24:A5:16:AD:4C:D7:DB:57:09:A7:9C:C4:09:46:CB:DB:88:5A:04:DF:B7:C4:04"}}},"request":{"raw":"GET /meversion?partner=OfficeProducts\u0026market=en-us\u0026uhf=1 HTTP/1.1\r\nHost: mem.gfx.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: public, no-transform, max-age=43200\r\nexpires: Sat, 06 Jun 2026 14:11:04 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-azure-ref: 20260606T113105Z-155b5864b57pv8gjhC1GVX1ax800000005g0000000004uvp\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30427,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30375)","md5":"bb8767e66871b074354111bf87a8e859","sha1":"9277d92a08e835f9d667878a019aa2b3d436b919","sha256":"6c48236f8c764c98a9a6690f7f3d2744e5ea3f37d7e39863b9c1213218a70fbf","sha512":"db1e3c71aaed34edb184135bc1b15c74605c3c9b820ff7d75da6addbb5647dd31a0950ab9afab254f982efb8f3e3fc95829d6aad802f3a5f75abb717def4f1f1","ssdeep":"768:c2y2n0SM0/RZsJIjrAnJdv2mfQFc6mjVqMP62A86LIzQIR:cPM0S5/zsHJdemYFcw662A86s8IR","tlshash":"69d2098a75c0b17582637078a67f650ff33a6aa1644c8518e41afdde7cbc80d9223f9d","first_seen":"2026-05-30T19:06:25.243653Z","last_seen":"2026-06-06T11:31:41.035023Z","times_seen":3,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":132,"dns":158,"connect":12,"send":0,"wait":47,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/main-m365.ACSHASHfe9d5283cc0a38f995b64bf0f39192eb.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/main-m365.ACSHASHfe9d5283cc0a38f995b64bf0f39192eb.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-6671a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419610,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1999)","md5":"c77057c15cd640811c2ae3c149816e28","sha1":"53af297c06063a67fc8abf140315f57e6d86dc8f","sha256":"5edbb203d881abf8341877b36f1e99154655a87e2714dee654e128eaf59e6957","sha512":"3450dfe61ac368d0be61a898c1948d385918d38c920ee373a601087b8ca0a4a3dcfc972820c37863dc84f3304993b8e2b90a7c17f566aaa7f13961ea242615b4","ssdeep":"12288:wDxREkZQKdaFA/RIc3f+u2wc/WVKSjdJjfMNlR48tmbK+2pA9XDTotHdN:EREkZQKdaFA/RIc3f+Pwc/6KSj7fMNlX","tlshash":"ad94c70837f2227640a7716e5fcf9101b230404f660add987dacdaa41f95a7846faff9","first_seen":"2025-06-17T17:33:16.33385Z","last_seen":"2026-08-13T22:40:28.999089Z","times_seen":939,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/3481250-Excel-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=433\u0026hei=443\u0026qlt=100\u0026fit=constrain","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/3481250-Excel-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=433\u0026hei=443\u0026qlt=100\u0026fit=constrain HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 27 Mar 2026 03:42:17 GMT\r\netag: \"9ff33dfb9de2311b30d7ba72b945692b\"\r\nx-adobe-smart-imaging: 16027\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 58909\r\nexpires: Sat, 06 Jun 2026 18:18:36 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=4, origin; dur=0, cdntime; dur=4\r\nakamai-cache-status: Miss from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.1008433c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58909,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9ff33dfb9de2311b30d7ba72b945692b","sha1":"981232249d75bff3122ba190d3df99c4f6690c1f","sha256":"5190c470392ad2e4eb62e38ca68755da8071d339cb664a1efaa5c752749b1e4e","sha512":"41fb61ed65d709fa6c07f40f55c64d827c1f8afb43a7ca167973c651344293049f149d60bbe5a87deeb95e560606448fae5b517d977efe5aec7a34e5366ed0d9","ssdeep":"1536:3TRLBD27yitYPerXCB1hC7sj23f0m3gmhLDK:tBD2APerCDOsj2Mm8","tlshash":"234302b0df26053dd36949b38276dd4de2ee4c9836251ba6ec24614a6c5fc0cc9f0e57","first_seen":"2026-05-04T02:18:33.440132Z","last_seen":"2026-06-06T11:31:41.036792Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:18.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\ndate: Sat, 06 Jun 2026 11:31:17 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T11:31:05.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 03 May 2026 15:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f77068-21f7f\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Onsen UI","description":"Onsen UI is an open-source HTML5 hybrid app framework offering mobile UI components for PhoneGap and Cordova development.","website":"https://onsen.io","common_platform_enumeration":"","icon":"OnsenUI.svg","categories":["Mobile frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}],"data":{"size":139135,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2333)","md5":"f0799b0d32c7c3a9afb9618abdda2d33","sha1":"8d6ad6f084a678d5153ab2d810123d2c704eeb41","sha256":"dd27a513fca72f3e30f5b86ebf105d0fea85c7cd169046aa00d01a2e84544c27","sha512":"da81af61f2de89e314216567e1b676f8e037f74839db5d76be03188d2f045242c9cd3ed782883985455125be7175046271d8e1807fa11f6058d290b9a2a92217","ssdeep":"768:B7qmHrPyiPaWZqxIsJiuhwSoE4o5iMKFbq2vOdH+OZv2OrjGEyo/7ta9cJdl0npT:hHr6iPaWZqxIPu21Vx39S7t7dl0f44","tlshash":"1dd3622191b1a13f56879ac8eb9ca41b7c455f87dd481487b1cd4b7c2fd2eb0ab0393a","first_seen":"2026-05-04T02:18:33.400247Z","last_seen":"2026-06-06T11:31:41.03973Z","times_seen":8,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlib-base.ACSHASHd28dd0c2d9415d418390bd06a1c67b03.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlib-base.ACSHASHd28dd0c2d9415d418390bd06a1c67b03.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-28bf0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166896,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d28dd0c2d9415d418390bd06a1c67b03","sha1":"b503c8bc4215fc591cd91203cbb6059aa9e84130","sha256":"9d293c57b74315e2969d3abafee4c66e9855536e92c8e22bde81bab4d9551bc2","sha512":"f1d7a9cf440cbc978577fa1a1e6c944539935743e9da9e2a0d4923fe3fb4b2609b4945315065874ee6caa530d7b600cb54d828b66d529525487f5f067851e970","ssdeep":"384:4SKA/Lc8hBVh465MMScQZuwtpYCCpHFw5hOqnL6z:4SKA/k2MRc4Usm","tlshash":"c8f3fb0ad4322e0675e7872df8bfba7d583c58331a5eb8b20659a38784505c7b831f6d","first_seen":"2025-11-11T09:42:13.480221Z","last_seen":"2026-06-06T11:31:41.041909Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-polyfills.ACSHASHtrue.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-polyfills.ACSHASHtrue.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-34f63\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216931,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (545)","md5":"f036b7d721f26c8fd6282d00a82eb1b3","sha1":"8d10439e8c742c9b07fe8850b8d530e01b9a9c8a","sha256":"7b1b45589d034d7b47c4ef1f3650c194fab95280786d9cc4d93d2f052fecf1af","sha512":"5ffaf53e68821c61443fb4d517a5c0a9a27669fa7f7baac63c9ebe29ec96ffdd1d04726515c8166d601165758b64f08bea622b900b2ab9db19cf75bc6c1a5c76","ssdeep":"1536:qYc4tC679NFbouCXxlKp+FWOzlBEn8TWpOS0hzsj2NR0Gz+jjNrv2iuKbkDtU8uF:NjBNF0zxiO5hTnS0hzK6R0qYr/","tlshash":"8424c5dd7a9ab4a196a33274002f510fb1bb59a5f84ccca0e195d4e4bc7ed0a513bf2c","first_seen":"2026-03-06T06:09:43.965918Z","last_seen":"2026-08-13T22:40:28.917898Z","times_seen":607,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-jquery-cookie.ACSHASH5c75a4fa9fb3503322f8a0c9dd51512d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-jquery-cookie.ACSHASH5c75a4fa9fb3503322f8a0c9dd51512d.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-57d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (504)","md5":"5c75a4fa9fb3503322f8a0c9dd51512d","sha1":"0a0c83a0501b798860c7dc5eb6ff55281a07fe0c","sha256":"c1eca656aa4a0097bcce33e22e8d3cdb25ce8197139a3d711a2035bd50e59da6","sha512":"f791e66d8a87b165679d0d8f559e4fa132db181a59c15a69d085cffbf6166b1bb7fdfde1b92361dc69f1c1672d00584b653b0cce6856bfa5b1912964721d7a4e","ssdeep":"","tlshash":"392176d4704b78474a265b25727f042a70fdae0195cd9849c601d5e07e31e031971bf5","first_seen":"2024-08-20T06:21:21.210494Z","last_seen":"2026-08-13T22:40:28.93685Z","times_seen":3154,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/site.ACSHASH56f4647082672f661e4ab78b3e2561e2.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/site.ACSHASH56f4647082672f661e4ab78b3e2561e2.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"56f4647082672f661e4ab78b3e2561e2","sha1":"8f18a809b5bba98fa78d8424d4e19a183268fb10","sha256":"9372866880588f629f467c1435b597ef7d3cfa782c6d564848c53b548f358a4c","sha512":"233b9add9ccdc5aab601ebd71a6987e554554bbccb49036a68dea28c233e4ffdb02b5dfa70071e96da3e17e9790b11de0129f8b1c66c5e53c8a99fdfeb4c6d0a","ssdeep":"","tlshash":"06d0950353783411b14f117f306845904b74d106d533452d1630971cf3d57cd0597115","first_seen":"2026-04-29T00:43:17.676269Z","last_seen":"2026-06-06T11:31:41.044266Z","times_seen":389,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/ae-f1ac0c.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/ae-f1ac0c.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-29b86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170886,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64241)","md5":"d9cdc753c792f7338898c9fdf68e1c8b","sha1":"c94c59f81f1654584fc8fc05cc67ff922b57cb71","sha256":"f5a32f74e377d084ac9e5c3d2456c5286b519f95489611287c0b6538079444aa","sha512":"601c02bc8514734f6e41469617b9323d0c75703bf43ee8683d3e36163add226b02385ff96e08b98c97130cfe3cba9e11a8881c9f15ca20695140627b76a13372","ssdeep":"3072:CzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxB:IlZA5hkJeqt","tlshash":"61f384f2a5b02cb9127b455bfc82623cbb3cf096d55338e6f785a1846ec1449e2db346","first_seen":"2026-05-04T02:18:33.415027Z","last_seen":"2026-06-06T11:31:41.045186Z","times_seen":8,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlib-contact-sales.ACSHASH4a1a21c1176e98acf994a206329519ba.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlib-contact-sales.ACSHASH4a1a21c1176e98acf994a206329519ba.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-41\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4a1a21c1176e98acf994a206329519ba","sha1":"556073a5577dd99996ab18050a8b0e95eb0d9f82","sha256":"c70dcca4600ef426081fe5cb273bf1ad8cfba4e42c0d72543070b110a1559c50","sha512":"68135c103e25d17c10e48fee68c642c4d15d94d96fb2a8de4d2938fb1661753ef99534f4bc21dcae6d941835005a94ec1a3cad22a6f5af347b8ea0859b1cbebe","ssdeep":"","tlshash":"06a022b3ee03000c000a080ae202c0280b3030283fac38c308c0b082ab082c80030c0c","first_seen":"2024-02-08T15:16:52Z","last_seen":"2026-08-13T22:40:28.996372Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/3481250-Word-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=475\u0026hei=443\u0026qlt=100\u0026fit=constrain","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/3481250-Word-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=475\u0026hei=443\u0026qlt=100\u0026fit=constrain HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 27 Mar 2026 03:42:17 GMT\r\netag: \"151749e23725752b648963918964e9c7\"\r\nx-adobe-smart-imaging: 15878\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 62476\r\nexpires: Sat, 06 Jun 2026 18:18:36 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=4, origin; dur=0, cdntime; dur=4\r\nakamai-cache-status: Miss from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62476,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"151749e23725752b648963918964e9c7","sha1":"f820f3b4798dffb9b714efb151decd811fa719f8","sha256":"59da9e4d94898577e1889d2a4fe31811f730a5e7605748b1a3913348541d09d3","sha512":"9e4ddbeea9c7a5ebf6a4fd3da6a5b066c8b604bf3ee6930e08a7b441959644f129f71fab94c4daebc7d55139e7caf407d5103c521696ece159bb04db9accf3c1","ssdeep":"768:PMer999QBNsSNO8LwSxFF7pHoLuJy8cxDmCXQtlfALii7pTIVEc2D+5Hkm9cVnY3:TdhSNxrM6Cgv4LxTI52DSkFVy","tlshash":"395302b8b49c1613dd99c43ae7409f7d5591d2f2b71b0b8c626e03eb8f9e1c209e7264","first_seen":"2026-05-04T02:18:33.413017Z","last_seen":"2026-06-06T11:31:41.048268Z","times_seen":8,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":61,"dns":118,"connect":7,"send":0,"wait":22,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft365office.duckdns.org/","fqdn":"www.microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T11:31:04.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://microsoft365office.duckdns.org/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139135,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":176,"dns":124,"connect":20,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"www.microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/micro.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/micro.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-34b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d12d054e6758975a2ec39ece9e3e06b5","sha1":"e75de43beddbf0f6ecc9cf41f1369fca08ab51b9","sha256":"3b230c0e9befcb75fe44eeab0f487e68fc89d78fafa97d7d81f65f4039badef6","sha512":"11ffe2042176c4bc0b5e5c5c152a4dab6f5477ca5f1e382b8bfaea52f9591f9d3b8eafa41cc4d04a1ab8533b237de3d978f92cf9c851a3b3c2a3ff2598e6f8d7","ssdeep":"","tlshash":"6201523b2994d072003324609e5be7947e33a2321042f9d360acd50f7f9ed031d798a2","first_seen":"2026-02-23T07:13:54.149575Z","last_seen":"2026-06-11T11:21:53.542878Z","times_seen":3394,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/main-m365.ACSHASH5a1b4bc4da24b724c61e5fb9d4377d1f.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/main-m365.ACSHASH5a1b4bc4da24b724c61e5fb9d4377d1f.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-63771\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":407409,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65331)","md5":"2be84dada2108bae9a114387e237582a","sha1":"88f740221ba3316cea6f603da2efaca55fc0f98c","sha256":"c2d77098060b880edd2d4c957cdf990b47edc159ac9dfe631b087ce9c607493c","sha512":"3234c9daf4fa4462ade8cd959847108963033d36a0c4d195e8ecf2c2234d00405b743c5dcaf8fb9af15dfdda132aab1dccd705a8ff3b5fbf79551bed16436e6f","ssdeep":"6144:7k67N1xfjJ3U9YVZTXuW37N1xfjJ3U9YVZTXuWXyG7N1xfjJ3U9YVZTXuWJsNHjW:18pfTh6","tlshash":"0b8472f9b591141ae663c13da0c1bb79462e2599b315be77f483b3bc8f493ca2112b1c","first_seen":"2026-05-04T02:18:33.397125Z","last_seen":"2026-06-06T11:31:41.050864Z","times_seen":8,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v4.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/v4.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-119a5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"13fd9629bb529ae56f57e20241f719bb","sha1":"f544e2012677ca473bd7aebb67d5d8c9c97c85e8","sha256":"c98282028c209f79a8d3880dab8555a8f0c24f90e477d94a67f7cfa3ed003e74","sha512":"69407f98f83eeb297f6cb2b2921edbab4ec5614cabb351e50e69a1b0eaf3b2cb9dd062fce99fde4b7ff20532ce499b70b3daa3b19aa7d482db268b05b75ff4a3","ssdeep":"1536:IMYT4Pkz00iK7EgmrawceNnYVVsK0mCVTywlJOPtpDiYKtJhcvfDv:IMY6g2phYVVsK0jVgVKuf7","tlshash":"8c63e7e97681703503a364b6203f610bb33b6a69690f8154f118e4e53dbde9e8637f6c","first_seen":"2026-05-01T01:51:19.960973Z","last_seen":"2026-06-09T15:27:59.744431Z","times_seen":526,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-product-pricing.ACSHASHf9c4f2ed4e61ec88e9a455f543919e32.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-product-pricing.ACSHASHf9c4f2ed4e61ec88e9a455f543919e32.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-2214e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139598,"size_decoded":0,"mime_type":"application/javascript","magic":"exported SGML document, Unicode text, UTF-8 text","md5":"f9c4f2ed4e61ec88e9a455f543919e32","sha1":"547530b87e9b1557cca2086d5b519c1db71a7de4","sha256":"c8f2af2bc3db2d43bb5799709e6a3904bae37fd04032969e73d14d76d59c4309","sha512":"b56348c57f7a57f1931c89ace7ac8e835af7b57298ccdc15deb3a011d55786aad9c9e0237cadec894f00da50a07ebacbaeea06915fa3985744c88e6d996e9656","ssdeep":"1536:spsJ/Brkzb7l2nUcNSbZc4PerQfjqjYvYWITFEs6+Qfamj0pYrLJoDpZA15pepKF:spxerQfjqjYv0O9AC","tlshash":"29d381e651f41f33046a1629dbeabfcf79ad0407a76a90d2388d12ec0f76a2443b55dc","first_seen":"2025-12-16T11:54:01.710437Z","last_seen":"2026-08-13T22:40:28.893094Z","times_seen":490,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH9455de77e3cdad08bf293f5b5ac4163a.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/site.ACSHASH9455de77e3cdad08bf293f5b5ac4163a.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-1e26\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"9455de77e3cdad08bf293f5b5ac4163a","sha1":"db02196989c1553990032df2507f967c90e46e72","sha256":"672bdc674c2d5c4c42abdba3659b75878d55d8f60814f900eab877f29a484e3e","sha512":"001a21c029daa47703fc61a30a32576583f077cb7e72705af638081ae07f363417f6ab89f800fd740f99d52ae3a159cee2fd5c1eebd20c4a4daa6bc3a2e8182e","ssdeep":"192:XbLMelZ51h456aeFY+AfCpwUjc7H+hsJa:x4peefCuUjYHw","tlshash":"62f1d9d872b1f4b1527661d2933f634bfbb968b6988cb490d13acca07e64604006bf69","first_seen":"2026-02-25T06:18:41.423174Z","last_seen":"2026-06-06T11:31:41.053894Z","times_seen":22,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:07.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\ndate: Sat, 06 Jun 2026 11:31:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":136,"dns":63,"connect":27,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:08.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\ndate: Sat, 06 Jun 2026 11:31:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/msochead.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/msochead.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-2e9d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11933,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11933), with no line terminators","md5":"39a08da542366e31321348a0c761889c","sha1":"eff074d9ba2a7d848f07a4dcd34045f0e476284e","sha256":"1c6c7f262b5fa5126295d527f5920d845d9a13dd72f86ec674274c11f1b263f2","sha512":"5742c1f7c5ab6f38153b6c9d257ba11765ac2fd1fd600914988b548e6ffe522a1eae69f16254db8cfeca36b752637171f125975db58215e1b69e7186c243403c","ssdeep":"192:i+P+JWasaYAjgRDmBBqC62sR9RsOE2vtgksEXElbE5kHVTtXIACXfX9th:iaAnNYAjgR+qC62rXkFkHVTpCv5","tlshash":"de32b832a43810fd7be7491b8646b61055fcf960c95d94e06a83f63d42cb29b33bad4c","first_seen":"2026-04-29T19:09:13.701499Z","last_seen":"2026-06-06T11:31:41.05456Z","times_seen":102,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/msochead.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/msochead.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-308c2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198850,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18371)","md5":"73f4873155a1764894b57be13fb26a27","sha1":"2b6b045406fcf396d088c9aa594e2c5387b101e1","sha256":"10b8bae707b7f09af1247bf1ce136b870acf5a5f8a5ad8183cb26eb11df344ac","sha512":"3666875e9dfdbb7324173ead0953b23df429636d8f83658c396473af591275478f3fb4d1e29d6b69a1df2f20e0e580b779593f4f1e3087ee13fe3b72502b9ab9","ssdeep":"3072:JY5bK6wOJfloAWZAXKvV4FMin3O5x/x8u2c:u5bK6ZJbKvVUMinix/xb","tlshash":"0d145c75b298117647ea06cab1676144f72e2257b400e496b85cdccc2bdaec710f2fbe","first_seen":"2026-04-23T15:45:10.052447Z","last_seen":"2026-06-06T11:31:41.055109Z","times_seen":32,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-click-group-telemetry.ACSHASHf25fec6821f63d701a6b6291a4011894.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-click-group-telemetry.ACSHASHf25fec6821f63d701a6b6291a4011894.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-980\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f25fec6821f63d701a6b6291a4011894","sha1":"1260ac884282372b86f3a600ba8903ad75983e67","sha256":"dd8619be444cce5f8db053215bb018c0bbc09af7baa9e66618bdf041b0a2e09c","sha512":"1f3c21e2c32dc8362a1ca12801fec56bd22cdaf0bb7fb8d0d118348019eb843a63a171154bb0392dfee268c5727f47cf139144596c0dfb7d12125ce659db35c9","ssdeep":"","tlshash":"7e41af1636f261e1021750ee03cb9185b226e58bb649d58cb99c97180fa9e71b5f3bcc","first_seen":"2024-08-06T07:44:39Z","last_seen":"2026-08-13T22:40:29.009482Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-contact-sales.ACSHASH7a524381cfd41a23a665d6a325c6f129.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-31f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"7a524381cfd41a23a665d6a325c6f129","sha1":"7d51e33401ac5119d173e66467301153ca77524b","sha256":"fa8c60611a57dd31cf897c48e5cd31e25fdddb93d4afbb18fdeb0437243d6fe3","sha512":"fdcbc10662d35b4bddcc71f18a4aeb56e06da01fbc8b3cbd3642c6cc658e69106626d1a9d2a709433ab27456d989b7eb1111d5a06dd09a105fd6d8f064129a93","ssdeep":"","tlshash":"e6018eac612489b711fb199ab10fa38071f1646bf803b9e4240d8c5c6aedfdf0e22d81","first_seen":"2025-09-06T15:08:26.795453Z","last_seen":"2026-08-13T22:40:28.960571Z","times_seen":782,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASH6734c5d7a732130b83c7d4a6ba54dcec.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/v1.ACSHASH6734c5d7a732130b83c7d4a6ba54dcec.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-128\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"6734c5d7a732130b83c7d4a6ba54dcec","sha1":"31f7a0d4d020dced43bcd613aa98f22eadda2f9f","sha256":"5fdbebc9071a728298e820e2fb1ff71aebf33c9c91069fa51fd5cd870f55f093","sha512":"405358fffc4e02ef04e4bc59a41e1b8330693a34ae2c2635435ce09538e376050a34ff250427b5809de9264e533288f79f173e78b1675171faa8c42c48c8f74c","ssdeep":"","tlshash":"b7e0eb383c91f0313f9a8ee7c27afacf79e4c923740c904410c48d9228cc2091ba0266","first_seen":"2025-03-09T08:38:15.190475Z","last_seen":"2026-08-13T22:40:28.882341Z","times_seen":2992,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/featurecontrol.ACSHASHf120033122e43a4cb0b53bb306afc5dc.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/featurecontrol.ACSHASHf120033122e43a4cb0b53bb306afc5dc.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"f120033122e43a4cb0b53bb306afc5dc","sha1":"24aa855c3086573936871ef159a4806cfd4cf904","sha256":"0776a8d556c597b202331e992bdabe65be587f468595214c7eaac639736687f1","sha512":"aab4c0641a122037e71757338b483b04114c10c5413e2140d07a5f68d264754695580c7657a383981ce2cc5d8b0233b124678bdbf89eeb2b8b3b461f13ed45cc","ssdeep":"","tlshash":"9ec08c3fb66836303d8b0db1502e46da6c2e5dd801051121145cd81864d86d98236a11","first_seen":"2025-03-09T08:38:15.185061Z","last_seen":"2026-08-13T22:40:28.966891Z","times_seen":3155,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/cookie-compliance-manager.ACSHASHd471cafc5d23f4577f5cf2676dcc276a.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/cookie-compliance-manager.ACSHASHd471cafc5d23f4577f5cf2676dcc276a.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-fbb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (647)","md5":"d471cafc5d23f4577f5cf2676dcc276a","sha1":"640b62299a16bf5889f3d690d2944cae7d1a2f10","sha256":"e7f57328ee44fd0e17468b1c0daf38980965311d4334b03acaa269efc931aba5","sha512":"6f120ba04a03e90b878cfd244ea28b9a7caed69bcdce47615cc19fe76cbb712cdf1d231da6759e36d5687c310c5bec83761445760b88385c17f2553429a4ac8e","ssdeep":"","tlshash":"ef81506772c1607457ab0536724f9607b2b23f7785884462b11183a43aa9f3a76b3afc","first_seen":"2025-10-21T02:40:21.025095Z","last_seen":"2026-08-13T22:40:28.97171Z","times_seen":2480,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/blade01_hero_img?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100\u0026fit=constrain","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:08.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/blade01_hero_img?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026qlt=100\u0026fit=constrain HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/plain\r\ncontent-length: 29\r\naccess-control-allow-origin: *\r\nserver: Unknown\r\nexpires: Sat, 06 Jun 2026 11:31:08 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Sat, 06 Jun 2026 11:31:08 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=1, clienttt; dur=109, origin; dur=91, cdntime; dur=18\r\nakamai-cache-status: Miss from child, Miss from parent\r\nx-akamai-cache: 0\r\nakamai-grn: 0.cc4d2417.1780745468.1008449f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T01:51:56.519356Z","times_seen":17879196,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:18.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.18\r\napikey: 1cfc1aff02e4437889594f14c4cad289-5bf9ec06-73a3-4827-a5e7-d709ff3d3b12-6941\r\nupload-time: 1780745478321\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 9665\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9665,"data":"{\"name\":\"InternalLog\",\"time\":\"2026-06-06T11:31:16.315Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":6,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.4\"}},\"data\":{\"baseType\":\"MessageData\",\"baseData\":{\"message\":\"AI: 64 message:\\\"One of telemetry initializers failed, telemetry item will not be sent: TypeError\\\" props:\\\"{exception:[object Error]{ stack: 'Zg/\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:180433\\\\nt/qa\u003c/e[st]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:30157\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\nr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27515\\\\nMa/\u003c/s/c\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27271\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\ns@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27178\\\\nl@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27526\\\\nka/a[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:26103\\\\ne/o[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:29674\\\\nt/vv\u003c/e.processTelemetry@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:134476\\\\nte/i/s@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3935\\\\nt/ig\u003c/e.processTelemetry@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:168824\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\nr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27515\\\\nMa/\u003c/s/c\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27271\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\ns@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27178\\\\nl@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27526\\\\nka/a[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:26103\\\\ne/o[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:29674\\\\nt.prototype.processTelemetry@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:46183\\\\nr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27515\\\\nMa/\u003c/s/c\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27271\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\ns@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27178\\\\nl@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27526\\\\nka/a[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:26103\\\\ne/o[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:29674\\\\nt/Od\u003c/e.processTelemetry@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:117938\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\nr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27515\\\\nMa/\u003c/s/c\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27271\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\ns@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27178\\\\nl@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27526\\\\nka/a[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:26103\\\\ne/o[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:29674\\\\nt/Ju\u003c/e.processTelemetry@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:85239\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\nr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27515\\\\nMa/\u003c/s/c\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27271\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\ns@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27178\\\\nl@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:27526\\\\nka/a[pe]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:26103\\\\ne/\u003c/e.releaseQueue/\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:35770\\\\nln@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:7556\\\\ne/\u003c/e.releaseQueue@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:35746\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\ne/\u003c/e[ne]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:34946\\\\nte/i/s@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3935\\\\nt/$a\u003c/e[ne]@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:37995\\\\nte/i/s@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3935\\\\nt/Io\u003c/e.initialize/\u003c@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:41250\\\\nkr@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:15412\\\\nt/Io\u003c/e.initialize@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:40567\\\\nn@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:3017\\\\nZg@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:180482\\\\n@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:181124\\\\n@https://microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js:1:181271\\\\n', message: 'can't access property \\\\properties\\\\, t.data.baseData is undefined', name: 'TypeError'}\\\"\",\"properties\":{\"version\":\"PostChannel=3.2.18\"}},\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}\n{\"name\":\"InternalLog\",\"time\":\"2026-06-06T11:31:16.319Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":7,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.5\"}},\"data\":{\"baseType\":\"MessageData\",\"baseData\":{\"message\":\"AI (Internal): 506 message:\\\"Can not parse {\\\"\",\"properties\":{\"version\":\"PostChannel=3.2.18\"}},\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-length: 59\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ncollector-error: No events are from an allowed domain.\r\naccess-control-allow-headers: Collector-Error\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\naccess-control-expose-headers: Collector-Error\r\ndate: Sat, 06 Jun 2026 11:31:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f82c897345de7334d3eba60b44f0560","sha1":"97d928d20a618dd0b726e1bf9e7a5b2a51f4b056","sha256":"443a90baf04def70862b0823078ec78d01cbb47f65b3982e95022c87e12025c3","sha512":"9459162e25b71d880b6c600fec467df19c7d84a5f165c410e29cb37700363ff232025d52ad58ac53fc6461e2f308a576f269d3433caa6fea32fca6ac7d0df1d0","ssdeep":"","tlshash":"64a0022b1a2165a40645554926695d535142c0da68605516a81066044a025adf15c408","first_seen":"2023-04-05T06:10:43Z","last_seen":"2026-07-07T02:36:32.610903Z","times_seen":162,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-base.ACSHASH7e89d60ab495cd79ad67f82f4ceb5b7f.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-base.ACSHASH7e89d60ab495cd79ad67f82f4ceb5b7f.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-32ec4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208580,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (852)","md5":"7e89d60ab495cd79ad67f82f4ceb5b7f","sha1":"8ee73375160e9d61bdb84870f47521878b8e3b9b","sha256":"52a714dd88565410005b6fa2ec1e02b54ec69f8c260b7aa06ad7de34b1ab2a26","sha512":"5ca0d8af48d89757cf70cd5afa0fb14ed4e147a98a78fbfdb39f0131d0d311e304084bfcad4d3417675aee8a8e12000a779f4711a317ad79fd2f1d7baad0145a","ssdeep":"3072:B64+dguiiYaeGpKNPN5/4OYQk/qNeUySLFMY+RNPN5/4OYQkq3UycLH1w:B64+dVdeGXh0w","tlshash":"17141764b1d26532199312e9042f0209ba3a70b7364dc81a765cfed61f6ccca46beff5","first_seen":"2026-04-14T05:05:18.329704Z","last_seen":"2026-06-17T10:44:54.843638Z","times_seen":530,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/latest.woff2","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/latest.woff2 HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 34052\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-8504\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-08-13T22:40:29.013181Z","times_seen":12708,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/site.ACSHASH953fdc4a1b669bc4fe0cefcf753f55be.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/site.ACSHASH953fdc4a1b669bc4fe0cefcf753f55be.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-5b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (510)","md5":"953fdc4a1b669bc4fe0cefcf753f55be","sha1":"4d6422bb8329342041f3532aa08a4da45b856601","sha256":"a9f9687ad65d04ed4f9a1f1913f485a636fc22ee2dfc16dc6836c4215a769a70","sha512":"c58996ec8fb3014865d132f288d90677a871c15989325fd9b3ce3d941f645a1050ba0233c5712a9bf8096eb218c4ba6a156dd6e1ee49e51df5196dfb2c418ea4","ssdeep":"","tlshash":"8c3130d8fb94307611a325f1853f124b73b514b01a898d90a256c6fb5d7ce5c6c13f9e","first_seen":"2025-07-31T11:53:57.384567Z","last_seen":"2026-08-02T05:43:56.269364Z","times_seen":28,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/site.ACSHASH40203e0bb3e24fd4626d84825f55e9c5.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/site.ACSHASH40203e0bb3e24fd4626d84825f55e9c5.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-118\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"40203e0bb3e24fd4626d84825f55e9c5","sha1":"3e0142f78901bbe4ab11204d50ff37aab3ee6457","sha256":"91b08794829c8062e7b13fbfea9bf1e07c86e8df911ff418c057a4127265361d","sha512":"bf10eb47b28eb2c540e6c21aabaced853ff27006b174e92a518b0e630ec880bd50276c434d183fd61c97c491796af882635c17e5428a9d06a853c3be806a5f0c","ssdeep":"","tlshash":"24d02b3611add419c8a72f26ba6afd8e5739d21bd6c6514800862be0928e0550c2e2c8","first_seen":"2023-06-19T21:48:49Z","last_seen":"2026-07-24T23:56:58.840077Z","times_seen":138,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/wcp-consent.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/wcp-consent.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-442b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279220,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63888), with no line terminators","md5":"5f524e20ce61f542125454baf867c47b","sha1":"7e9834fd30dcfd27532ce79165344a438c31d78b","sha256":"c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9","sha512":"224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2","ssdeep":"6144:dIcsZZWWI0BDqL9W4sC6Hdo7NjIZjIZP0hZRWLF9LmSF/EI:dIcsZtI0BGoHdo7NjIZjIZP0vC75F/x","tlshash":"98546d7fe3c420ad03012346b885bb39ba1d067d7691d6c5f84ca57d23c2b95c52abfa","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-06-06T11:31:41.064637Z","times_seen":10744,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/isv-redirect.ACSHASH4fe566c049f9a2018cb50b843c891d28.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/isv-redirect.ACSHASH4fe566c049f9a2018cb50b843c891d28.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-7bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4fe566c049f9a2018cb50b843c891d28","sha1":"5efcf3d33cc402a1c1773a4cf4915061139d3298","sha256":"e30120a3c5f11d64fb882d86d030aa3ff6ad632f3184afdd280b28a19caadb5d","sha512":"98a4e626fbcd04ce5b809b8e8c78a8ae6f49e8199aa4f460be0baa5dc40fa56d127ae746b92ab03a387d10fb2a424d2de305bc170d8c58af344cc80fa29e6e50","ssdeep":"","tlshash":"3b413340f1b2342551e342754da3e218a331e00f3529e9c93b8d429d4f9ad6f91a3ef9","first_seen":"2025-06-30T08:18:03.004622Z","last_seen":"2026-08-02T05:43:56.297169Z","times_seen":321,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-httpclient.ACSHASHbdf4e043fe12e5b0add3f5e1e82ea4c5.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-httpclient.ACSHASHbdf4e043fe12e5b0add3f5e1e82ea4c5.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-13085\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (850)","md5":"bdf4e043fe12e5b0add3f5e1e82ea4c5","sha1":"45580163c58d85a128a5113a776dfcb84c9d3838","sha256":"f9cfec2fe0fdbbb3b30478f2fa9af520773b84e8ba9cc38d4391ddeedec61430","sha512":"e35550d3c04bd0aa2938370076e237e3fce829d7c8f030c5e64fa26dca08bbc1a85e2d2582713347c2473bde7f517c7515a9ef8a920e1f620acb2671f8790e0e","ssdeep":"1536:0lhh3t2L5CR7zwmceC9jcrtO3y2C780XzfMEu3L4D:6hh3aSnaeC9jcr9BQ4D","tlshash":"2473b6d8b2e2b060036375b4812f110bf73e687aa44c54a4f168e8d67cf544d967bfb9","first_seen":"2026-04-29T00:43:17.637554Z","last_seen":"2026-06-09T02:42:28.340475Z","times_seen":434,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/main-m365.ACSHASHc16cef0fcbe233cd31fdb9f3958699cc.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/main-m365.ACSHASHc16cef0fcbe233cd31fdb9f3958699cc.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-68d21\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429345,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (47697)","md5":"c16cef0fcbe233cd31fdb9f3958699cc","sha1":"69c1b48c3a7b58940d61669c64b1180c21e82585","sha256":"633fd810ba654bbf515b1147ec1138a9393c6187d2c438143833b6d96586660a","sha512":"5cf66fd1550baf1c6b79d934772f29640e182693bc35eea85899a6e0d2ec726539ca9f5571ed6b8928f7edbf863a6486068d44020e98072bc6053a7403f45353","ssdeep":"6144:BNtD82/OfC+aMAcaJHbRYgLor/uM2H1DtgrY2zIXrKx/f1byDyHNdEVkqe+x3s69:6TsD","tlshash":"5a94a6b9f1c1201fb653417d54d2fb79562e51c1ab005bbbb867b6b48bca2cb2123f12","first_seen":"2026-05-04T02:18:33.423736Z","last_seen":"2026-06-06T11:31:41.067234Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-chat.ACSHASHb21767ddb88a6a72011a1e8a790118f8.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-1e313\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (578)","md5":"b21767ddb88a6a72011a1e8a790118f8","sha1":"7da3ddc01f691cfebd40a1eddf137b392328e417","sha256":"1c29b01e1f2236daa58af70c28ef91dd4e8a7f97da1e3be16bf5dfe5f0bc2dfd","sha512":"c6a26c6752b23fe9cba80a16458811a6296e5e07573677be6410e0df72ee13050a450a7b14e05178fd815e40150d81c8cc602e323845a76939243d3d847e403b","ssdeep":"1536:zL8yyxT9wG4SS3M2SzG10yveUXi4i37QEeCs/sWzjp07OG5E:n8ZJhGTSPr8zjp0Tu","tlshash":"3bc3298d72d57ca74296a1a4642f2306733a6839b408e4acfd78c5d6bcb4e49407ff78","first_seen":"2025-09-06T15:08:26.843222Z","last_seen":"2026-08-13T22:40:28.968207Z","times_seen":834,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/v1.ACSHASHa238861e6209e4e02576ddf5d1749c8b.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/v1.ACSHASHa238861e6209e4e02576ddf5d1749c8b.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-e2d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (541)","md5":"a238861e6209e4e02576ddf5d1749c8b","sha1":"b9ff67fedc61b0c4a7720eda4b95c2dcf8022f07","sha256":"8198f47143a8196b8f8f4e14ecd870842b5715c7ea9f4e667361af9933fb828b","sha512":"50e82145dc06093df0bbabbb0c60869922da89a3c370c03872ad7f1b2935b205a7d67e824db0351f1b5853a8da40fef2506ab001cfc96438bb32d9f3873e99a0","ssdeep":"","tlshash":"a871765a7bc5e030ab5d1433e26fda0a717136a3c84980a1f0598ca83a75b6572b2bf4","first_seen":"2025-03-21T20:40:09.942722Z","last_seen":"2026-08-13T22:40:29.013956Z","times_seen":2062,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/main-m365.ACSHASH073a932f7683246e6f21d89e199af76d.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/main-m365.ACSHASH073a932f7683246e6f21d89e199af76d.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-8c8a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":575649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (647)","md5":"073a932f7683246e6f21d89e199af76d","sha1":"010d3461938390bab455f71a5b82f2f10e8f9e8b","sha256":"0317fd5b4b43a5b2b9c3440f71a735bc76fe226de615394c11c01bdc62f8f40a","sha512":"66a2109bc154a8852545b97bbb1d1c66a01482a84caa1c1d7d267b200e552f838f12efbb4dd3ecc985a09e38986f2fb7cc10ba58dbc29e2e0d42f9df0f65017f","ssdeep":"6144:qgSeMD345NZo/X07dQUE+ZofrT0NOJ9Kywr5p5v5bIGwRYnnBPePU4s5rZCig:4Da8r+er4UK7p5viRYnY05rZCig","tlshash":"f6c439fa7741b73b55e27728812b518f766daca5e844806c7ac7ccde2ca4d06013ebb4","first_seen":"2026-01-22T08:24:45.957346Z","last_seen":"2026-08-02T05:43:56.304855Z","times_seen":169,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-cookieconsent.ACSHASHc892f451b0c4db9c8ab2601a427c9b2c.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-cookieconsent.ACSHASHc892f451b0c4db9c8ab2601a427c9b2c.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"c892f451b0c4db9c8ab2601a427c9b2c","sha1":"420faf75711481c1112d7700385779e87930e875","sha256":"389377dda2f9b7a9ef203764c0e8d2a7b22f02158e98f90a74d4bae3c52cd9d3","sha512":"480617aa121e9f6902203265118f775eabd9785cbe7f8e9be7d808eb97f871542402e081c6e874a029d970c51701da0cb57ac75928d854300303de663ea30b97","ssdeep":"","tlshash":"f0c08c2336c2030853fb0371610f0205f20062faeb9c023e1a6025b009a0f2236fcddb","first_seen":"2025-03-09T08:38:15.184278Z","last_seen":"2026-08-13T22:40:28.930685Z","times_seen":3124,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/images/favicon.ico","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MicrosoftApplicationsTelemetryDeviceId=7eb0b534-b286-4cb3-91d0-af7815477377; ai_session=mTrvebPEcrSg0IyoHuxj5C|1780745466300|1780745466300; Cascade.AuthSSO=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 17174\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-4316\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-08-14T01:09:50.869652Z","times_seen":171742,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:07.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 08 May 2026 12:29:04 GMT","end":"Wed, 04 Nov 2026 12:29:04 GMT"},"fingerprint":{"sha1":"1F:FE:1D:B1:D2:A6:4C:45:E5:5F:F7:97:CC:50:3D:FF:4B:75:3E:FD","sha256":"38:20:EE:20:C6:13:8D:A3:E9:E1:8B:36:61:AA:29:0A:AC:1F:1F:A8:8C:FE:35:15:A4:BC:48:24:78:B2:AC:FF"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.18\r\napikey: 1cfc1aff02e4437889594f14c4cad289-5bf9ec06-73a3-4827-a5e7-d709ff3d3b12-6941\r\nupload-time: 1780745467330\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 6724\r\nOrigin: https://microsoft365office.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6724,"data":"{\"name\":\"Ms.Web.PageView\",\"time\":\"2026-06-06T11:31:06.297Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"web\":{\"isManual\":false,\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":1,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.0\"},\"metadata\":{\"f\":{\"behavior\":{\"t\":6}}}},\"data\":{\"baseType\":\"PageviewData\",\"baseData\":{\"ver\":\"1.0\",\"id\":\"3545306a-64ea-4fb6-a994-832a0811ed31\",\"name\":\"Download Microsoft 365 (Formerly Office 365) for Windows and Mac | Microsoft 365\",\"uri\":\"https://microsoft365office.duckdns.org/\",\"properties\":{\"pageTags\":{\"metaTags\":{\"canvasType\":\"web\",\"isTented\":\"false\",\"cms\":\"AEM\",\"program\":\"golf\",\"enabledFeatures\":\"LocaleDetection;QspEnabled;contentbackfillgenerate;esiproductcards;feature-controlled-mwf;uhf-ms-io-endpoint;uhf-esi-cv;uhf-esi-cache;contentsquare;mediapixel;holiday-themer;lazyload-static-components;clientlibDefer;upsellEnabled;contentbackfillpkgdelete;healthcheck;contentbackfillhttpgenerate;perf-tracker-1ds;dynamic-bundle;cvIncrementer;tentingEnabled;chatCookiesImplemented;alertCountDownWithoutServerTime;pdpDynamicRendering;bundlesDynamicRendering;contentbackfillmetadatachangesvideo;contentbackfillmetadatachangesnonvideo;listDynamicRendering;experimentation-without-personalization;generic-list-importer;combinedUHF;cvCallEnabled;m365ProductCatalog;support-unsupported-locales;deferClickTale;videoLazyLoad;prefetchFontsEnabled;enable-code-isolation;imageLinkTag;fetchPriority;contentIngestionAgent;enableClickgroupTelemetry;imageLazyLoad;contentIngestionAgent-dispatcher2westus2Agent;isCacheControlFeatureEnabled;feature-controlled-content-card;lcpPrioritizationPhase1;ocReimagineTelemetry;deferScriptsEnabled;lcpPrioritizationPhase2;ocReimagineSlotNumberTelemetry;contentIngestionAgent-dispatcher1westus2Agent;ocReimagineComponentNameTelemetry;ocReimagineTemplateNameTelemetry;ptePhase1;extended-html-minification-sites;dynamicPrice;gl-auto-config;displayV35Toggle;chatCustomEndpoint;enableBoostPersonalization;ocReimagineTelemetryTemplateNameSwap;enableEmailConnector;enable-eventingService;ocReimagineAIAssistant;acsPMEFeatureEnabled;ocReimagineCustomerApiUrl;ocReimagineCustomerFilterApiUrl;email-FigmaEmailAutomation;storeVideoUmp;ocProductPricePrimaryLocale;complianceManagerEnabled;entertainmentEW;enableClarityScript;EnableCascadeAuthSDK;ecsMigrationCheck\",\"authtype\":\"anonymous\"},\"client\":\"AEM\"},\"version\":\"PostChannel=3.2.18\"},\"pageType\":\"Microsoft 365\",\"market\":\"en-us\",\"isLoggedIn\":false},\"cookieEnabled\":true,\"behavior\":0,\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}\n{\"name\":\"Ms.Web.ContentUpdate\",\"time\":\"2026-06-06T11:31:07.323Z\",\"ver\":\"4.0\",\"iKey\":\"o:1cfc1aff02e4437889594f14c4cad289\",\"ext\":{\"web\":{\"isManual\":false,\"domain\":\"microsoft365office.duckdns.org\",\"userConsent\":false,\"consentDetails\":\"{\\\"Required\\\":true,\\\"Analytics\\\":false,\\\"SocialMedia\\\":false,\\\"Advertising\\\":false,\\\"GPC_DataSharingOptIn\\\":true}\"},\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.18\",\"seq\":5,\"installId\":\"7eb0b534-b286-4cb3-91d0-af7815477377\",\"epoch\":\"643802946\"},\"app\":{\"locale\":\"en-US\",\"env\":\"prod\",\"sesId\":\"mTrvebPEcrSg0IyoHuxj5C\"},\"user\":{\"locale\":\"en-US\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"mscv\":{\"cV\":\"CASMicrosoftCV6480831b.0.3\"},\"metadata\":{\"f\":{\"baseData\":{\"f\":{\"behavior\":{\"t\":6},\"pageHeight\":{\"t\":6},\"vpHeight\":{\"t\":6},\"vpWidth\":{\"t\":6},\"vScrollOffset\":{\"t\":6},\"hScrollOffset\":{\"t\":6}}}}}},\"data\":{\"baseType\":\"ContentUpdateData\",\"baseData\":{\"name\":\"Download Microsoft 365 (Formerly Office 365) for Windows and Mac | Microsoft 365\",\"uri\":\"https://microsoft365office.duckdns.org/\",\"market\":\"en-us\",\"pageType\":\"Microsoft 365\",\"isLoggedIn\":false,\"id\":\"3545306a-64ea-4fb6-a994-832a0811ed31\",\"properties\":{\"pageTags\":{\"metaTags\":{\"canvasType\":\"web\",\"isTented\":\"false\",\"cms\":\"AEM\",\"program\":\"golf\",\"enabledFeatures\":\"LocaleDetection;QspEnabled;contentbackfillgenerate;esiproductcards;feature-controlled-mwf;uhf-ms-io-endpoint;uhf-esi-cv;uhf-esi-cache;contentsquare;mediapixel;holiday-themer;lazyload-static-components;clientlibDefer;upsellEnabled;contentbackfillpkgdelete;healthcheck;contentbackfillhttpgenerate;perf-tracker-1ds;dynamic-bundle;cvIncrementer;tentingEnabled;chatCookiesImplemented;alertCountDownWithoutServerTime;pdpDynamicRendering;bundlesDynamicRendering;contentbackfillmetadatachangesvideo;contentbackfillmetadatachangesnonvideo;listDynamicRendering;experimentation-without-personalization;generic-list-importer;combinedUHF;cvCallEnabled;m365ProductCatalog;support-unsupported-locales;deferClickTale;videoLazyLoad;prefetchFontsEnabled;enable-code-isolation;imageLinkTag;fetchPriority;contentIngestionAgent;enableClickgroupTelemetry;imageLazyLoad;contentIngestionAgent-dispatcher2westus2Agent;isCacheControlFeatureEnabled;feature-controlled-content-card;lcpPrioritizationPhase1;ocReimagineTelemetry;deferScriptsEnabled;lcpPrioritizationPhase2;ocReimagineSlotNumberTelemetry;contentIngestionAgent-dispatcher1westus2Agent;ocReimagineComponentNameTelemetry;ocReimagineTemplateNameTelemetry;ptePhase1;extended-html-minification-sites;dynamicPrice;gl-auto-config;displayV35Toggle;chatCustomEndpoint;enableBoostPersonalization;ocReimagineTelemetryTemplateNameSwap;enableEmailConnector;enable-eventingService;ocReimagineAIAssistant;acsPMEFeatureEnabled;ocReimagineCustomerApiUrl;ocReimagineCustomerFilterApiUrl;email-FigmaEmailAutomation;storeVideoUmp;ocProductPricePrimaryLocale;complianceManagerEnabled;entertainmentEW;enableClarityScript;EnableCascadeAuthSDK;ecsMigrationCheck\",\"authtype\":\"anonymous\"},\"client\":\"AEM\"},\"version\":\"PostChannel=3.2.18\"},\"ver\":\"1.0\",\"behavior\":0,\"pageHeight\":2385,\"content\":\"[{},{},{},{},{},{},{},{},{},{},{},{},{},{},{}]\",\"contentVer\":\"2.0\",\"vpHeight\":1024,\"vpWidth\":1280,\"vScrollOffset\":0,\"hScrollOffset\":0},\"cookieEnabled\":true,\"isDomComplete\":true,\"CookiePresentRPSSecAuth\":false,\"MsAuthType\":\"anonymous\",\"RelatedServerCV\":\"CASMicrosoftCV6480831b.0\",\"x-traceId\":\"2e54ec62e910a980329f04a4388d8538\",\"CMS\":\"CascadeV2\",\"tenantName\":\"bade\",\"tenantTitle\":\"Brand, Advocacy, Digital and Experiences\",\"tenantDomain\":\"microsoft\",\"tenantSiteName\":\"microsoft\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-length: 59\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ncollector-error: No events are from an allowed domain.\r\naccess-control-allow-headers: Collector-Error\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://microsoft365office.duckdns.org\r\naccess-control-expose-headers: Collector-Error\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f82c897345de7334d3eba60b44f0560","sha1":"97d928d20a618dd0b726e1bf9e7a5b2a51f4b056","sha256":"443a90baf04def70862b0823078ec78d01cbb47f65b3982e95022c87e12025c3","sha512":"9459162e25b71d880b6c600fec467df19c7d84a5f165c410e29cb37700363ff232025d52ad58ac53fc6461e2f308a576f269d3433caa6fea32fca6ac7d0df1d0","ssdeep":"","tlshash":"64a0022b1a2165a40645554926695d535142c0da68605516a81066044a025adf15c408","first_seen":"2023-04-05T06:10:43Z","last_seen":"2026-07-07T02:36:32.610903Z","times_seen":162,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":74,"connect":27,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/publisher.ACSHASHd04116a7de4f2a26cdce768dfe83c5b0.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/publisher.ACSHASHd04116a7de4f2a26cdce768dfe83c5b0.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-291\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":657,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, ASCII text","md5":"d04116a7de4f2a26cdce768dfe83c5b0","sha1":"83a51ad446f944c97493022a32cdc51a95b3fd34","sha256":"2b3c1170ccac9b1e2b0c70a6d2a6d8c290cc55f3d7eea099b13d172289553b67","sha512":"ea8440395285519dc7fd4dd6f8f71357c01f01120606085642eb9c8e4d21b2223ea754fcd324e395b8acaeff27105c313ba4a204c152e0c18fd48bf5f74a9bea","ssdeep":"","tlshash":"130178c3d8f4a89362377ca5ea048790e146b35703c8ac447ede85bc5f573930b116a2","first_seen":"2025-02-07T17:08:29.255155Z","last_seen":"2026-08-13T22:40:29.002Z","times_seen":1048,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/custom-oneds.ACSHASHbf880242325f20f5b8644293f4586135.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-1f3e86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2047622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9658ff75c511eeda8340e357ab5fbef1","sha1":"3a7f787d03d4522234bfe770d007e38685761a61","sha256":"537c14af01a7d351eecaccf0b671388c1e58f3e931339e78be31a2fadc21831a","sha512":"de299c5d750c75d0d279354d4bcd35aeab93593cbaa10beeaa87c5c3c9fb3f767f18239c37d23d845eac7cd63fa94d7870f8ce05b9c37ed8dc53ed3ad54488f6","ssdeep":"12288:gk4Dhe6otWg+8aQ/n0b3cInyFtVRCy8BYyFVBZ5vfDg53WFQdLyPcTzLGssFBA3G:gk4DheLWg+8bzewO","tlshash":"3c25196aee042c6eeb5c3233b8ce36e6522e97831d135498d04ff58b04a0e1d57d5e6e","first_seen":"2026-02-12T21:58:47.345692Z","last_seen":"2026-06-06T11:31:41.075507Z","times_seen":826,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/latest_3.woff2","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/latest_3.woff2 HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/ae-f1ac0c.css\r\nCookie: MicrosoftApplicationsTelemetryDeviceId=7eb0b534-b286-4cb3-91d0-af7815477377; ai_session=mTrvebPEcrSg0IyoHuxj5C|1780745466300|1780745466300; Cascade.AuthSSO=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29388\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-72cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29388,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29388, version 0.0","md5":"6e75a94d5f7170a1ab532d32c2a35755","sha1":"9c1b6fff544089941bbeddbcf529c3f0b46d853a","sha256":"d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f","sha512":"27cdbf98a3f42510eaeb28437e3c4661734b685d63eff5e47364ac46b73de617894edcb19ddd9afd955de192cfd8bb755998ed609ec2c279e9afab3db2583175","ssdeep":"768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e","tlshash":"f0d2e1ceb288a6b2cf6f2234d60344d63a3be647565d38b4adc49d918b20d0fe4dd04b","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-08-13T22:40:28.962658Z","times_seen":12002,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlib-uhf.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlib-uhf.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-196\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":406,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f9f2395c582fa601707b7a5dfae9f05f","sha1":"27b15aecd0bfdd3b25556ac00755856d4d331e0d","sha256":"d7d6d06624d4bdf6935b848df342ce322d02b58d12bf12149df92d557e5e9bc4","sha512":"f3378927d96b0b172981a821a8c2a16d0f397ed92e835b7c46316fc48350402d972a5411f0fa4c260f205aa1f7917f83f8247bf8a62c7f22e0076b168275b1e9","ssdeep":"","tlshash":"cae0a7bef173e8924b6f08f259023575aa6cc88b72611470e7d5a7490f4408351e34d5","first_seen":"2023-04-08T09:20:51Z","last_seen":"2026-08-13T22:40:28.904644Z","times_seen":4075,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /js/clientlib-jquery.ACSHASH75d0cb3e9ff9fee40f5ce5fd93c17fb2.min.js HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-16b15\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (889)","md5":"75d0cb3e9ff9fee40f5ce5fd93c17fb2","sha1":"4cf20fc81a4125eb2b8830665f0c36b12c0d173f","sha256":"a60767ad70a8092a0388abb199aafaaf61fd70772aa41cc878a18ec9dbb80ffd","sha512":"cc51a0cc7b9eba6c7e3c220b191370f82b2458d248e7ee7ed7c81d1e222bd96e3e8fa238cafacfbb64da1cb51d3538509c938b19d9e20e2a913f827af257fbf0","ssdeep":"1536:7B4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:7qxNrNG9FnHKD/oIKq6Tjv","tlshash":"119319edb6c771628ba734b850bf010bf1bb599ab04c8850f055d4e4bd74a4a50bbf2d","first_seen":"2024-09-19T19:36:04.099549Z","last_seen":"2026-08-13T22:40:28.990951Z","times_seen":3118,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/css/clientlib-chat.ACSHASHfa6f56b2d3037982772378233706c9af.min.css","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:05.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /css/clientlib-chat.ACSHASHfa6f56b2d3037982772378233706c9af.min.css HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://microsoft365office.duckdns.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f5e2b0-3d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":982,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fa6f56b2d3037982772378233706c9af","sha1":"a511b80627bf05c511f348b3c1aaf4f2fa174365","sha256":"be37586e1929ef52245871fb9fb2c2e2a31a14ee9b421439ca67948ec4036188","sha512":"14e7287defbe26244b9c19edae24b3bfe7e336d41fa1ae85142b8ecb18cc20458953b0bbec9e10ef6691fdb059494bfe65269ab47d2a2ac49a84d6ef7f2affac","ssdeep":"","tlshash":"79117ff3b4845239b0e2d314bda6ab6f793560e7b25119f8e478a3328d4f5d62c30d06","first_seen":"2023-04-10T14:19:23Z","last_seen":"2026-08-13T22:40:29.002762Z","times_seen":1346,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"microsoft365office.duckdns.org/fonts/mwfmdl2-v3.54.woff","fqdn":"microsoft365office.duckdns.org","domain":"microsoft365office.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"138.226.236.115","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoft365office.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 15:10:40 GMT","end":"Sat, 01 Aug 2026 15:10:39 GMT"},"fingerprint":{"sha1":"35:58:87:D6:A0:3F:48:4F:CD:CC:D1:9D:D1:4E:35:61:95:B9:FD:6F","sha256":"3E:0F:2C:BF:8A:5E:98:BA:4F:A8:AE:96:05:B2:72:BA:8C:EE:9A:8C:A6:EF:9C:FA:24:0F:27:F3:C2:3D:91:11"}}},"request":{"raw":"GET /fonts/mwfmdl2-v3.54.woff HTTP/1.1\r\nHost: microsoft365office.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://microsoft365office.duckdns.org/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 26288\r\nlast-modified: Sat, 02 May 2026 11:40:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69f5e2b0-66b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 26288, version 0.0","md5":"d0263dc03be4c393a90bda733c57d6db","sha1":"8a032b6deab53a33234c735133b48518f8643b92","sha256":"22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12","sha512":"9511bef269ae0797addf4cd6f2fec4ad0c4a4e06b3e5bf6138c7678a203022ac4818c7d446d154594504c947da3061030e82472d2708149c0709b1a070fdd0e3","ssdeep":"768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/","tlshash":"20c2e197c410d15dd123f2b5592b2f6c9a9220ac775e2a2606ce730b1ceeb3253a7357","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-08-13T22:23:06.995716Z","times_seen":10640,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"microsoft365office.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"microsoft365office.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/3481250-PowerPoint-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=433\u0026hei=443\u0026qlt=100\u0026fit=constrain","fqdn":"cdn-dynmedia-1.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://microsoft365office.duckdns.org/","date":"2026-06-06T11:31:06.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure4s.scene7.com","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:1C:D1:99:D8:C4:71:9A:85:25:CA:F9:23:1A:45:BC:8B:86:8B:B0","sha256":"9C:6F:86:66:26:FE:C9:2A:E0:E0:62:82:C3:41:DA:DE:DC:45:45:63:0D:2F:08:EE:98:E9:B8:62:79:82:99:6C"}}},"request":{"raw":"GET /is/image/microsoftcorp/3481250-PowerPoint-Header-Mobile-720x405?resMode=sharp2\u0026op_usm=1.5,0.65,15,0\u0026wid=433\u0026hei=443\u0026qlt=100\u0026fit=constrain HTTP/1.1\r\nHost: cdn-dynmedia-1.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 27 Mar 2026 04:46:22 GMT\r\netag: \"c65eee930d3fa24b6ca2170dad02108c\"\r\nx-adobe-smart-imaging: 55089\r\nserver: Unknown\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/avif\r\ncontent-length: 22909\r\nexpires: Sat, 06 Jun 2026 17:45:36 GMT\r\ndate: Sat, 06 Jun 2026 11:31:06 GMT\r\nakamai-request-bc: on\r\nserver-timing: clientrtt; dur=0, clienttt; dur=1, origin; dur=0, cdntime; dur=1\r\nakamai-cache-status: Hit from child\r\nx-akamai-cache: 1\r\nakamai-grn: 0.cc4d2417.1780745466.10084332\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22909,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c65eee930d3fa24b6ca2170dad02108c","sha1":"c5bf7ac33c2fb2d9274fe3d9c11a637decbfc234","sha256":"163d7a2046bc158facb507ad13cd91a4704856163475aa3489327081656a8eeb","sha512":"97c4814b4180e82c1ab9a3c6ee327c0f336c93f1cfc73abc68406a00242401590ce574817489d97558a8ac43fa383d1fea1110044c2bc2d200fd6ab56a9115e6","ssdeep":"384:zdQBOS6I9bEA+Ci8e5iORLcW7wMOg+QOTZot3jda7/T+cHHfW692GEpOVhXNGPS:dSnBEhC85iOR4ttQOT6d8Tjnu9GPVVNr","tlshash":"f4a2e1c5118515caf9b919b14bfa4f8ba9e6f0138444e05e8db2f72b3a560be192c713","first_seen":"2026-05-04T02:18:33.374744Z","last_seen":"2026-06-06T11:31:41.079835Z","times_seen":8,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}