{"report_id":"d4ace0d3-c265-4a43-90fc-e1745a6173f4","version":6,"status":"done","tags":[],"date":"2026-05-21T21:18:21Z","url":{"schema":"http","addr":"teams-live.com.cn","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":0,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"teams-live.com.cn/","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"title":"Microsoft Teams 远程协作解决方案 - 中国企业远程团队项目交付首选工具","dom":{"size":53858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (436)","md5":"ab818e85ede55c8a72c16d9233d1b2a7","sha1":"f0f02fcebf9baaa9e40f8fd6effa1cb1beee0a16","sha256":"7d6b419f8b0e83dd6b74fc0eaa9177716c4426f2aecaf56ccdefe121ea144787","sha512":"dc122f6e1fd20e706856f17bb0b896a2e568be0cf4b24db1def735f9d191050253f04a0494d31a2c90287220345f6befd20b064f416753c515c9143d68bcfec1","ssdeep":"384:M20TO3J9yDsiO320EFFtKGv4wpSNoDxkRLM9AJ1Xp8+:M20S59yDsiO3jEFz4lo8LSA5","tlshash":"0733941e65f310562543a1a9affb5b493674c043ce0acdb93bdc13888fc6ae9989374d","dom_hash":"domhasha8e9d1fa342b6b177e1e145343bc7749","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teams-live.com.cn","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":0,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-25T21:18:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"p11-flow-imagex-sign.byteimg.com","ip":{"addr":"116.162.172.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2018-10-28","domain_rank":0,"first_seen":"2026-03-25T02:44:47.481592Z","last_seen":"2026-05-21T08:50:46.906789Z","alert_count":0,"request_count":3,"received_data":917697,"sent_data":2029,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-17T22:36:28.748469Z","alert_count":0,"request_count":5,"received_data":479442,"sent_data":2475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":1,"received_data":209295,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p3-flow-imagex-sign.byteimg.com","ip":{"addr":"47.246.48.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-10-28","domain_rank":765224,"first_seen":"2024-07-30T09:48:21Z","last_seen":"2026-05-21T08:50:46.992372Z","alert_count":0,"request_count":2,"received_data":425776,"sent_data":1348,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-05-18T07:50:11.806733Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-17T22:25:57.974982Z","alert_count":0,"request_count":1,"received_data":330215,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"teams-live.com.cn","ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"domain_registered":"2026-05-17","domain_rank":0,"first_seen":"2026-05-21T08:50:46.3783Z","last_seen":"2026-05-21T08:50:46.3783Z","alert_count":6,"request_count":3,"received_data":59576,"sent_data":1734,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0592f8748a65b0c765a9dc16e8965f","sha1":"0b57c73b681877233c466f79cb283ad9c7461ccf","sha256":"65f6c13748b0c8d8f9eabd0373a130ac293b3f16bf34aaa946d953980372b932","sha512":"21cf71904463c99d71809e6cbf1df2d2edf1aef7d3fee3e457df4b0707baf318f2fe61ad3bee1e5111d9056db15b84996c5ac5d537f4f745ea07e1158179d58f","ssdeep":"768:W0piWwQvzaX+89dZckHLat7kIju6Y0IQPWeHfHmdtY:Z1z4DukrGkyXIQu/4","tlshash":"b71319ca3645b072669f627aa52f020ab33614ed290f4054f325a4ec7c7c5bc877be9d","size":42667,"data":"","first_seen":"2023-07-01T04:11:33Z","last_seen":"2026-06-26T14:35:19.777403Z","times_seen":2974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-live.com.cn/","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0372ff037a824d2156f9ee80d892904b","sha1":"ffb973c9d6f71fabfbdf7c82d4a90a3785614e16","sha256":"bf2f64510a98d9bd663d8cdc31ec012930fcd719682e398c82f32d4b4553d846","sha512":"98e642ad8fa972c2a6c91cc826f1ecfc633bfd115dca2ade5a1cd178b8af160cdf90cd4d8273d556a03135b01c11461f35e420a00475e99ae9171bbf46ee8c4e","ssdeep":"","tlshash":"7d90000e88cb2c0b828a820202200b8300ae2a8082a88fa82c28c8c008c0c08a00a233","size":54,"data":"","first_seen":"2026-05-21T08:50:54.783038Z","last_seen":"2026-05-21T21:18:27.375791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"448deef673e4d919eb5592410f72533e","sha1":"1c9885c96816c793e18a01edb0306960138c1322","sha256":"efc85c7eb141819717cda0033484a84b1c890d13b02e355a2fec79d424b20e7a","sha512":"d7a7acced69246994944eb2d6c821dc17dcdf7b575fa966f577dc00681b51f63b24edb41c441a44eca0856c88fd62693b4cf1bdfe86eda407aa50e0296be72ba","ssdeep":"1536:NSJK9KwH3psBxyPJ/oSu6kJof0RDi7OmNXzE7y:kK9HHyj6Gof0g6mNXwW","tlshash":"c863f8cd3192f422039a51a1447f0a4bf33ba958640f0918f269e5ce7d3c99d52bbf7a","size":71520,"data":"","first_seen":"2023-07-01T04:11:33Z","last_seen":"2026-06-26T17:27:12.286396Z","times_seen":5721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-XXXXXXXX-X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c4a8f6adfd0fcb2605efeeb7b12f7a","sha1":"1e05c0b5c18bb6eaf5bab3594c5c887e5db23bdb","sha256":"178e9920574cd52b44c74f50fe0cc190c4c6c6e1cf2ca8541d7bd15191d2e5bb","sha512":"d05059a67b06ff902adca34cad4ab7cf5ae40adf3d63d6410fe631aace543f6ed4af195f2e43bb3b4834bd2ea9d59f9778fe6912a05ead59f831184395c5c4ae","ssdeep":"6144:zDpDlqvCeAnCa5qjxndXtFqGFCWUpQFEOP:zaCeAd5aipo/P","tlshash":"b864f9cdb3dab4624393a878903f114bb23a79d2f848c898f146d8d42e746694277f7d","size":329565,"data":"","first_seen":"2026-05-21T21:18:27.373588Z","last_seen":"2026-05-21T21:18:27.373588Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-live.com.cn/sandbox%20eval%20code","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-live.com.cn/","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4727c5d67c27e2114000948543eefd75","sha1":"308c90b9960fcf9c6a581f10a9cefe70d2c9e880","sha256":"652d9dae1d82ea3d546b48fa1658e8cb139695383af6b385f9e230b4d3d5d7f7","sha512":"e162bbd3f1e8ab0f4d66d825158f6c50fd11889c1f1082a6088554322f23b933a6530459dbd117366aee589ebea520827f6d97dae1ecc65e5ffbdca89740fe50","ssdeep":"","tlshash":"b571315f81b2143501bfba6ac36f67047036108f1943ed093e6d4b451fe4da658f1ae5","size":3634,"data":"","first_seen":"2026-05-21T08:50:54.792325Z","last_seen":"2026-05-21T21:18:27.38291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-06-26T14:25:55.544363Z","times_seen":98377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-06-26T12:09:20.862859Z","times_seen":5084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teams-live.com.cn/team.png","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-live.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 10:19:13 GMT","end":"Sat, 15 Aug 2026 10:19:12 GMT"},"fingerprint":{"sha1":"84:5B:B4:96:8D:68:68:1A:0D:A6:AE:42:C6:AE:07:EA:B2:57:03:9E","sha256":"6A:36:36:F1:6B:19:E4:6F:C5:AA:B9:A1:08:C3:B5:6D:36:77:15:C2:82:D1:8C:05:8E:86:E9:35:1F:81:86:7B"}}},"request":{"raw":"GET /team.png HTTP/1.1\r\nHost: teams-live.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 11:20:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09a472-99e\"\r\nexpires: Sat, 20 Jun 2026 21:17:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e74f6356899e47e4fd6466791fa7622b","sha1":"1331a225afa4479396ba090a7de20f95ad9351ef","sha256":"d74a4bd4dd90fdb7d4f95930cf975ed4c868a29c75d62c3e5e5352086382806d","sha512":"8f9d859978db22048ec4c495fbedc87d9dc26f04bf338f607b7d998947dfe18f813e8c0215dbee6f0e3d09f4bfbc9da602d87fec35e584e0b47495b50a7eadb8","ssdeep":"","tlshash":"6c511aa20ae1bb89e25cb89a5da781d183e4358ee9da108e3665d185757c11422c5305","first_seen":"2026-05-21T08:50:54.758879Z","last_seen":"2026-05-21T21:18:27.326947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p11-flow-imagex-sign.byteimg.com/tos-cn-i-a9rns2rl98/rc/pc/super_tool/07b6a77038f94931bd9aabb88248df37~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594734\u0026x-signature=63YV6xov4TuvyyVIEvIxpMvjZ70%3D","fqdn":"p11-flow-imagex-sign.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"116.162.172.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:BC:A0:89:02:44:87:24:EA:BD:72:5D:69:19:1F:E8:D9:2E:E3:4C","sha256":"F3:32:3D:06:E1:6A:27:75:AD:65:90:F3:50:22:38:7B:42:22:C0:56:35:6D:20:59:85:74:C2:85:42:EE:3C:E9"}}},"request":{"raw":"GET /tos-cn-i-a9rns2rl98/rc/pc/super_tool/07b6a77038f94931bd9aabb88248df37~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594734\u0026x-signature=63YV6xov4TuvyyVIEvIxpMvjZ70%3D HTTP/1.1\r\nHost: p11-flow-imagex-sign.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 21 May 2026 02:05:54 GMT\r\ndate: Thu, 21 May 2026 02:05:54 GMT\r\ncontent-type: image/jpeg\r\nimagex-fmt: jpeg2jpeg\r\nnw-session-id: 20260521100554878853A645C7CFF02EE367bhd01ff\r\nnw-session-trace: 2026-05-21T10:05:54.221498388+08:00 109\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-kfc-cachekey: http://a9rns2rl98/tos-cn-i-a9rns2rl98/rc/pc/super_tool/07b6a77038f94931bd9aabb88248df37~tplv-a9rns2rl98-image.image\r\nx-length: 249920\r\nx-powered-by: ImageX\r\nx-response-date: Thu, 21 May 2026 10:05:54 GMT\r\nx-tt-logid: 20260521100554878853A645C7CFF02EE3\r\nx-request-ip: fdbd:dc03:8:598::69\r\nx-tt-trace-host: 01490da43119552fa1068d8812201725ed51283b4db30e55612807fe64890cbfb3c81c534cdb8dfa01c483ffbf35f1fe1fbf136e1dbc75235f108965b6830e84e866a5b984738bad1392027a73f06b01e81d9a2fb1382f1e79a9527c60d82a6ff24213ed01bf002148b5844163afd3905edc016d4b4a83e16d0d9144fbe4eb9c1a\r\nx-tt-trace-id: 00-260521100554878853A645C7CFF02EE3-62CFB3DF88986F54-00\r\nserver: TLB\r\ncache-control: max-age=31536000\r\nage: 69127\r\ncontent-length: 249920\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8045627385144901259\r\nx-cache-lookup: Cache Hit\r\nserver-timing: inner; dur=117, cdn-cache;desc=hit, edge;dur=3\r\nx-tt-supplier-id: 0_27\r\naccess-control-allow-origin: *\r\nx-response-cache: edge_hit\r\nx-response-cinfo: 91.90.42.154\r\nx-response-sinfo: 116.162.172.57\r\nx-tt-trace-tag: id=11;cdn-cache=hit;type=static\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"7e19e341c70d8e83fcd9feb9ef3f1fb7","sha1":"3464c33bc68848d44af42515e8e75d2f58d5a2ca","sha256":"81401ee88345ee3eec3695206c11fd92e4113e15a236ff27472136ed61923858","sha512":"21c7536321012260a4d971cc8925cb76a3ee363f68862e4173e1efec12402fc3a0ab212809200f941edf93b9bfe060fe7918f3d7993e5e00b472e5d39b5c9af2","ssdeep":"6144:wLo7bDmn5rJYsBN27hfTVk6RIkLQZ9Vpftm54B0RsquTdIn:wOXm599C7hfTi6SkL2DFm40abun","tlshash":"df342332b3b54819c8d9673e877aa0a257778ec07c3cab3951061ecd46c9171d3f68ad","first_seen":"2026-05-21T08:50:54.751422Z","last_seen":"2026-05-21T21:18:27.331013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3724,"timings":{"blocked":644,"dns":506,"connect":265,"send":0,"wait":1584,"receive":454,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:18:00.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://teams-live.com.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 21:18:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 607334\r\nexpires: Tue, 11 May 2027 21:18:00 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRtczDuW8dPhX1Zcbij2rIbTBXQdDgzMB%2FhpVBfyA40Ra5uZvep4f1%2Bh2E%2FC5Bt6w7MGdqiMb%2BYZuXxh46MQGH1TYOYO9S8kyNBkDQk%2FEkQ9zuV5ulTzckNYEyXBA3VaBk%2BM%2Fiai\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ff69c77091e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-26T15:27:18.621167Z","times_seen":19769,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:18:00.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://teams-live.com.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 21:18:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1290561\r\nexpires: Tue, 11 May 2027 21:18:00 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ev82ZX8gPjTQs6yD5vCrD%2BoVtxpYwLZnrVnR1Dn%2FS2DrGPMNjMUDAiVEa%2FqbRdS2VZPOQfm1TtX2215lCDm%2BrrMmJm9GutcuxHSGwcZABSl0P33IsuXmtIoP7Ow783b4AX%2FSAXPc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ff69c76c81376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-26T16:40:24.017945Z","times_seen":39038,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":22,"dns":1,"connect":0,"send":0,"wait":7,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-live.com.cn/team.png","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:18:01.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-live.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 10:19:13 GMT","end":"Sat, 15 Aug 2026 10:19:12 GMT"},"fingerprint":{"sha1":"84:5B:B4:96:8D:68:68:1A:0D:A6:AE:42:C6:AE:07:EA:B2:57:03:9E","sha256":"6A:36:36:F1:6B:19:E4:6F:C5:AA:B9:A1:08:C3:B5:6D:36:77:15:C2:82:D1:8C:05:8E:86:E9:35:1F:81:86:7B"}}},"request":{"raw":"GET /team.png HTTP/1.1\r\nHost: teams-live.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nCookie: __vtins__3PvmSWByJQjJFxwI=%7B%22sid%22%3A%20%222640fb69-e3fb-50b7-8e65-eb1919c21291%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201779400080647%2C%20%22ct%22%3A%201779398280647%7D; __51uvsct__3PvmSWByJQjJFxwI=1; __51vcke__3PvmSWByJQjJFxwI=5f6d8c32-016b-5f9e-95f9-ddad8dfd98fb; __51vuft__3PvmSWByJQjJFxwI=1779398280653\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 May 2026 21:18:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 11:20:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09a472-99e\"\r\nexpires: Sat, 20 Jun 2026 21:18:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e74f6356899e47e4fd6466791fa7622b","sha1":"1331a225afa4479396ba090a7de20f95ad9351ef","sha256":"d74a4bd4dd90fdb7d4f95930cf975ed4c868a29c75d62c3e5e5352086382806d","sha512":"8f9d859978db22048ec4c495fbedc87d9dc26f04bf338f607b7d998947dfe18f813e8c0215dbee6f0e3d09f4bfbc9da602d87fec35e584e0b47495b50a7eadb8","ssdeep":"","tlshash":"6c511aa20ae1bb89e25cb89a5da781d183e4358ee9da108e3665d185757c11422c5305","first_seen":"2026-05-21T08:50:54.758879Z","last_seen":"2026-05-21T21:18:27.326947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\nage: 5678\r\nx-served-by: cache-fra-etou8220052-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 71722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-06-26T12:09:20.862859Z","times_seen":5084,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":64,"dns":35,"connect":14,"send":0,"wait":13,"receive":17,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.2/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 25280\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"649c91f5-62c0\"\r\nlast-modified: Wed, 28 Jun 2023 20:03:01 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1188267\r\nexpires: Tue, 11 May 2027 21:17:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47o%2B4yJ%2F5IaDvbeZG%2FOMAOqg2WBQzZ%2F4y7TBRQixier%2BxMAVNm1E1pfQtmQMjasTdiiyug8I01wdzlmpzvTWXTJUk%2BYPfG1NhTq2QmKETkcoMtwdcnOzm2utT8vD8qvZLYnkaTO6\"}]}\r\ncf-ray: 9ff69c7148ee712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71520,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65240)","md5":"448deef673e4d919eb5592410f72533e","sha1":"1c9885c96816c793e18a01edb0306960138c1322","sha256":"efc85c7eb141819717cda0033484a84b1c890d13b02e355a2fec79d424b20e7a","sha512":"d7a7acced69246994944eb2d6c821dc17dcdf7b575fa966f577dc00681b51f63b24edb41c441a44eca0856c88fd62693b4cf1bdfe86eda407aa50e0296be72ba","ssdeep":"1536:NSJK9KwH3psBxyPJ/oSu6kJof0RDi7OmNXzE7y:kK9HHyj6Gof0g6mNXwW","tlshash":"c863f8cd3192f422039a51a1447f0a4bf33ba958640f0918f269e5ce7d3c99d52bbf7a","first_seen":"2023-07-01T04:11:33Z","last_seen":"2026-06-26T17:27:12.286396Z","times_seen":5721,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":34,"dns":3,"connect":5,"send":0,"wait":14,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.2/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.2/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15693\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"649c91f5-3d4d\"\r\nlast-modified: Wed, 28 Jun 2023 20:03:01 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1268673\r\nexpires: Tue, 11 May 2027 21:17:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1ioEI8%2Byc67Q3rKxeBKiCEs2eZNX7KayPO2f7Ss7GECJjZQxDsEKbpu9%2FVuFCucd%2BJCTgSON1IXwUyc8HF407oIoiH0oUXeaAp1iuKtDwKikruetOjNh6SlxNDqXP6l%2FL3DHNn0\"}]}\r\ncf-ray: 9ff69c7148f1712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42667,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42360)","md5":"9f0592f8748a65b0c765a9dc16e8965f","sha1":"0b57c73b681877233c466f79cb283ad9c7461ccf","sha256":"65f6c13748b0c8d8f9eabd0373a130ac293b3f16bf34aaa946d953980372b932","sha512":"21cf71904463c99d71809e6cbf1df2d2edf1aef7d3fee3e457df4b0707baf318f2fe61ad3bee1e5111d9056db15b84996c5ac5d537f4f745ea07e1158179d58f","ssdeep":"768:W0piWwQvzaX+89dZckHLat7kIju6Y0IQPWeHfHmdtY:Z1z4DukrGkyXIQu/4","tlshash":"b71319ca3645b072669f627aa52f020ab33614ed290f4054f325a4ec7c7c5bc877be9d","first_seen":"2023-07-01T04:11:33Z","last_seen":"2026-06-26T14:35:19.777403Z","times_seen":2974,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":33,"dns":1,"connect":4,"send":0,"wait":11,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3-flow-imagex-sign.byteimg.com/tos-cn-i-a9rns2rl98/rc/pc/super_tool/ed7f7be1f5e345ee9039ca606c7d5f5d~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594810\u0026x-signature=3ffePlWSOR42DnFbC9x8TY2PJ4I%3D","fqdn":"p3-flow-imagex-sign.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"47.246.48.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:BC:A0:89:02:44:87:24:EA:BD:72:5D:69:19:1F:E8:D9:2E:E3:4C","sha256":"F3:32:3D:06:E1:6A:27:75:AD:65:90:F3:50:22:38:7B:42:22:C0:56:35:6D:20:59:85:74:C2:85:42:EE:3C:E9"}}},"request":{"raw":"GET /tos-cn-i-a9rns2rl98/rc/pc/super_tool/ed7f7be1f5e345ee9039ca606c7d5f5d~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594810\u0026x-signature=3ffePlWSOR42DnFbC9x8TY2PJ4I%3D HTTP/1.1\r\nHost: p3-flow-imagex-sign.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/jpeg\r\ncontent-length: 227252\r\ndate: Tue, 19 May 2026 14:49:29 GMT\r\ncache-control: max-age=31536000\r\nimagex-fmt: jpeg2jpeg\r\nlast-modified: Tue, 19 May 2026 14:49:29 GMT\r\nnw-session-id: 202605192249293AEE993106C9CB483C436jnzj01ff\r\nnw-session-trace: 2026-05-19T22:49:29.775495998+08:00 116\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-kfc-cachekey: http://a9rns2rl98/tos-cn-i-a9rns2rl98/rc/pc/super_tool/ed7f7be1f5e345ee9039ca606c7d5f5d~tplv-a9rns2rl98-image.image\r\nx-length: 227252\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 19 May 2026 22:49:29 GMT\r\nx-tt-logid: 202605192249293AEE993106C9CB483C43\r\nvia: fdbd:dc02:24:116::32, ens-cache3.l2de3[0,0,200-0,H], ens-cache19.l2de3[2,0], ens-cache4.nl3[9,9,200-0,M], ens-cache7.nl3[11,0]\r\nx-request-ip: fdbd:dc02:22:46::96\r\nx-tt-trace-tag: id=03;cdn-cache=hit;type=static\r\nx-response-cinfo: fdbd:dc02:22:46::96\r\nx-response-cache: miss\r\nserver-timing: inner; dur=122\r\nx-tt-trace-host: 019dd8df21dc48250e61efa6f61094e866bd6823a00d8889b2fef5f8f79a214d8c6359c1aaf1de0ed8ef37ce2efa0d3b407542bbcc256ae79f8af65d5e39be79391d1eac36fe13c55d3469afef9435b2f13edf91c9ec242c9c61a6ca6b0e3162470c486f644c019f00634905e88ba8ce74\r\nx-tt-trace-id: 00-2605192249293AEE993106C9CB483C43-66A2EDE26A0BDDB6-00\r\nage: 196110\r\nali-swift-global-savetime: 1779202170\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Thu, 21 May 2026 21:18:00 GMT\r\nx-swift-cachetime: 31339890\r\nx-tt-supplier-id: 0_1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff6309b17793982807228713e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":227252,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"88b045ecf3cd1baf5c0c58f9be9b8e47","sha1":"651db589a55a29615dc21ccdb58cc5311f162ac1","sha256":"6ce9e5317927e3ab223cc883ac79db5311ae178ab5f082773def719173108126","sha512":"2f3d718287037834db5b9fd6f986f374fd2220f2b6493a70ed86525e2bd35f7c952522b7fa56aa5711c34eda7b9b8f9662d9244ae95c3dcd2f84c35b301239ca","ssdeep":"6144:PEa1P/UL/bLM3BqwG/EfVtlvR7LeYWCZYibYQP/PggmJYCMmaZLOLqS:PEa10jf8BqQP9R7qYWCZ/bYrJYCM3LQv","tlshash":"5224222bb792329a889c8e87107b19d09355ed9d163034cb49bf0981f9bfb49977cca4","first_seen":"2026-05-21T08:50:54.77105Z","last_seen":"2026-05-21T21:18:27.343252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":642,"dns":0,"connect":26,"send":0,"wait":117,"receive":53,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-live.com.cn/","fqdn":"teams-live.com.cn","domain":"teams-live.com.cn","tld":"com.cn"},"ip":{"addr":"103.101.191.15","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-21T21:17:58.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.teams-live.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 10:19:13 GMT","end":"Sat, 15 Aug 2026 10:19:12 GMT"},"fingerprint":{"sha1":"84:5B:B4:96:8D:68:68:1A:0D:A6:AE:42:C6:AE:07:EA:B2:57:03:9E","sha256":"6A:36:36:F1:6B:19:E4:6F:C5:AA:B9:A1:08:C3:B5:6D:36:77:15:C2:82:D1:8C:05:8E:86:E9:35:1F:81:86:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teams-live.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 17 May 2026 11:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09a90d-cfb7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}],"data":{"size":53175,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (357)","md5":"8e9cd49a2bfb0ad23357d600d0960afd","sha1":"ebe1f0bd4c035938e5d828eb228f1fe9f4848140","sha256":"a6d6a3048fc599963026857c21955d22c5c4ef3531c405f9227ec5a1e57613ca","sha512":"8da56dd75c48ba50de1e6864670fb5caa5304d9f5eb268843526aceceaa23be9b75282de1cafd834303a6f76dca2f992db71b292dc48eb3c9ab933a990273356","ssdeep":"384:q20TAE3J9yDsiO320EFFtKQv4laSNoDGmRLM9AJ1Xp8+:q208E59yDsiO3jEF/4LoHLSA5","tlshash":"b333a41e66f310662543a1b96ffb5b4a3664c043cd0acd683fed13888fc6ae9985374d","first_seen":"2026-05-21T08:50:54.77566Z","last_seen":"2026-05-21T21:18:27.347077Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1509,"timings":{"blocked":623,"dns":89,"connect":263,"send":0,"wait":263,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"teams-live.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 21:17:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 773177\r\nexpires: Tue, 11 May 2027 21:17:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ep88BGkL3lWAh%2BRNP71K5kLZWC2v6IEii6dZTeSgcETa5Pe93zWyH57EIoLwjJVih58TWPQToOc0f%2B5PNULzMgDalqCKaDUrghiV5qIX0UJsIpP69ABrLIZCj4DCqQvGRLLjy3UZ\"}]}\r\ncf-ray: 9ff69c7138e2712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-06-26T17:45:22.35069Z","times_seen":52686,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3-flow-imagex-sign.byteimg.com/tos-cn-i-a9rns2rl98/rc/pc/super_tool/674a0a18b299449cb6faed27f7a718b6~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594909\u0026x-signature=%2BIQRMI17gM%2Bazj7HtauM7je6cg0%3D","fqdn":"p3-flow-imagex-sign.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"47.246.48.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:BC:A0:89:02:44:87:24:EA:BD:72:5D:69:19:1F:E8:D9:2E:E3:4C","sha256":"F3:32:3D:06:E1:6A:27:75:AD:65:90:F3:50:22:38:7B:42:22:C0:56:35:6D:20:59:85:74:C2:85:42:EE:3C:E9"}}},"request":{"raw":"GET /tos-cn-i-a9rns2rl98/rc/pc/super_tool/674a0a18b299449cb6faed27f7a718b6~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594909\u0026x-signature=%2BIQRMI17gM%2Bazj7HtauM7je6cg0%3D HTTP/1.1\r\nHost: p3-flow-imagex-sign.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/jpeg\r\ncontent-length: 195381\r\ndate: Tue, 19 May 2026 14:49:29 GMT\r\ncache-control: max-age=31536000\r\nimagex-fmt: jpeg2jpeg\r\nlast-modified: Tue, 19 May 2026 14:49:29 GMT\r\nnw-session-id: 2026051922492916C782F392ED401F9D2Bphf5k01ff\r\nnw-session-trace: 2026-05-19T22:49:29.451042372+08:00 73\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-kfc-cachekey: http://a9rns2rl98/tos-cn-i-a9rns2rl98/rc/pc/super_tool/674a0a18b299449cb6faed27f7a718b6~tplv-a9rns2rl98-image.image\r\nx-length: 195381\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 19 May 2026 22:49:29 GMT\r\nx-tt-logid: 2026051922492916C782F392ED401F9D2B\r\nvia: fdbd:dc02:24:116::32, ens-cache20.l2de3[0,0,200-0,H], ens-cache10.l2de3[2,0], ens-cache4.nl3[9,9,200-0,M], ens-cache7.nl3[11,0]\r\nx-request-ip: fdbd:dc03:15:17::41\r\nx-tt-trace-tag: id=03;cdn-cache=hit;type=static\r\nx-response-cinfo: fdbd:dc03:15:17::41\r\nx-response-cache: miss\r\nserver-timing: inner; dur=93\r\nx-tt-trace-host: 019dd8df21dc48250e61efa6f61094e866bd6823a00d8889b2fef5f8f79a214d8c77213e4de2f178696671dc70e48a784fc7e674a8d76710673ab5eb38c95d8b78f7a4f1c1c0b9a9406fee214091ec7548e22d1cbcfe8265b8e264e0f004743d08a1ccb8669571d55b49f95757bcd5e1bb\r\nx-tt-trace-id: 00-26051922492916C782F392ED401F9D2B-2DE89DE74C1248CF-00\r\nage: 196111\r\nali-swift-global-savetime: 1779202169\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Thu, 21 May 2026 21:18:00 GMT\r\nx-swift-cachetime: 31339889\r\nx-tt-supplier-id: 0_1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff6309b17793982807218712e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":195381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"102f841c6e0f53099aa9b3057518b905","sha1":"fcd86f7bed334db9ed69935ae816895141963c90","sha256":"350c0e808a0542b063a2046ab3fef47968e21c47baec7adba266f64f95c8d260","sha512":"fe19e4c14a42c1003845a3d546d118d75bc5ddcbdfed56eee66713e16e91d2bcab57dacf0c9de4ea6122d0c58961f86c3dcedac65d6a83e7d778defa6a3c96aa","ssdeep":"3072:3dccSsfIeJSpNP0GLrf/47NK3GqQf9AaVYbBneaFaQicTF1llIQAZhbF8BkKn:CcSwRJSpN3/47+Q1AaVqd9gQi+bllIRm","tlshash":"eb1423bf592ab32b9e0c657301cae50c5ec21de4be64ee140445ac989f9fb1c9cc148f","first_seen":"2026-05-21T08:50:54.76568Z","last_seen":"2026-05-21T21:18:27.350821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":645,"dns":0,"connect":26,"send":0,"wait":38,"receive":79,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p11-flow-imagex-sign.byteimg.com/tos-cn-i-a9rns2rl98/rc/pc/super_tool/7165d3917dee49aca9a241b563e65320~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594857\u0026x-signature=8yIL%2F2uxG4Lc0IQvISIqe7IuLes%3D","fqdn":"p11-flow-imagex-sign.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"116.162.172.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:BC:A0:89:02:44:87:24:EA:BD:72:5D:69:19:1F:E8:D9:2E:E3:4C","sha256":"F3:32:3D:06:E1:6A:27:75:AD:65:90:F3:50:22:38:7B:42:22:C0:56:35:6D:20:59:85:74:C2:85:42:EE:3C:E9"}}},"request":{"raw":"GET /tos-cn-i-a9rns2rl98/rc/pc/super_tool/7165d3917dee49aca9a241b563e65320~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594857\u0026x-signature=8yIL%2F2uxG4Lc0IQvISIqe7IuLes%3D HTTP/1.1\r\nHost: p11-flow-imagex-sign.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 17 May 2026 07:27:38 GMT\r\ndate: Sun, 17 May 2026 07:27:38 GMT\r\ncontent-type: image/jpeg\r\nimagex-fmt: jpeg2jpeg\r\nnw-session-id: 20260517152738A88412D53B2D23FB9533dvshp01ff\r\nnw-session-trace: 2026-05-17T15:27:38.471076472+08:00 51\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-kfc-cachekey: http://a9rns2rl98/tos-cn-i-a9rns2rl98/rc/pc/super_tool/7165d3917dee49aca9a241b563e65320~tplv-a9rns2rl98-image.image\r\nx-length: 200992\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 17 May 2026 15:27:38 GMT\r\nx-tt-logid: 20260517152738A88412D53B2D23FB9533\r\nx-request-ip: fdbd:dc01:25:582::100\r\nx-tt-trace-host: 019f9a4311a3a8be4f1fdf0e828e10fbd33be40cb0f2960f0e5ca0cea471543dfab865de25566ce0df40bd266c81a8bbb343b785c92ea2daac504135583d9aed82f21dcd68c2e4ac952ead7df1bf74c1e668e50f75af8f17050597860d08a28aa37588c0185b843d4cb8ed831d0d7e0ca6d7b079f1859ccfacd3ada86849326246\r\nx-tt-trace-id: 00-260517152738A88412D53B2D23FB9533-3B96B48F7EC4821A-00\r\nserver: TLB\r\ncache-control: max-age=31536000\r\nage: 69127\r\ncontent-length: 200992\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1471874013077759179\r\nx-cache-lookup: Cache Hit\r\nserver-timing: inner; dur=72, cdn-cache;desc=hit, edge;dur=5\r\nx-tt-supplier-id: 0_27\r\naccess-control-allow-origin: *\r\nx-response-cache: edge_hit\r\nx-response-cinfo: 91.90.42.154\r\nx-response-sinfo: 116.162.172.57\r\nx-tt-trace-tag: id=11;cdn-cache=hit;type=static\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"88ca713d0642aacc235b175a0f69285b","sha1":"e8a8de3e740b76e50aa8244808e55102fa9a4699","sha256":"67d2bda5e893ca477d40199a913c5655d7d5831630b5522f52b0b47c020ba37e","sha512":"b788c0c23cd2ed9576a35bd4aa64626b70affe8c4d9bedec9b677b9dfb165ca510a30c7831d96a8acd35df35df4260abace0d0beb5a3222074ae7a287252547e","ssdeep":"6144:A7mNDpT+UgaesNqZwFG9LbNOPASTeP66whtQ7F:A7mN9qUgoPB/GatKF","tlshash":"f214228ef644382d5d9ed97fb0bd0961c750447bb02e2a105cd0df2aba3f853ae585e4","first_seen":"2026-05-21T08:50:54.755562Z","last_seen":"2026-05-21T21:18:27.355028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2622,"timings":{"blocked":640,"dns":506,"connect":239,"send":0,"wait":246,"receive":744,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:18:00.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 258\r\nOrigin: https://teams-live.com.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://teams-live.com.cn\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\nage: 0\r\ncontent-length: 0\r\ndate: Thu, 21 May 2026 21:18:00 GMT\r\neo-log-uuid: 13974105609685517497\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-26T17:34:34.797448Z","times_seen":16738548,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p11-flow-imagex-sign.byteimg.com/tos-cn-i-a9rns2rl98/rc/pc/super_tool/300d018bfca14b8f806db8865693686c~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594703\u0026x-signature=%2B557RRvoM6dVS5%2FZNl%2FL%2BQyQzPg%3D","fqdn":"p11-flow-imagex-sign.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"116.162.172.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:BC:A0:89:02:44:87:24:EA:BD:72:5D:69:19:1F:E8:D9:2E:E3:4C","sha256":"F3:32:3D:06:E1:6A:27:75:AD:65:90:F3:50:22:38:7B:42:22:C0:56:35:6D:20:59:85:74:C2:85:42:EE:3C:E9"}}},"request":{"raw":"GET /tos-cn-i-a9rns2rl98/rc/pc/super_tool/300d018bfca14b8f806db8865693686c~tplv-a9rns2rl98-image.image?lk3s=8e244e95\u0026rcl=2026051715243065F685F550F072BB66D2\u0026rrcfp=f06b921b\u0026x-expires=1781594703\u0026x-signature=%2B557RRvoM6dVS5%2FZNl%2FL%2BQyQzPg%3D HTTP/1.1\r\nHost: p11-flow-imagex-sign.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 17 May 2026 07:25:05 GMT\r\ndate: Sun, 17 May 2026 07:25:05 GMT\r\ncontent-type: image/jpeg\r\nimagex-fmt: jpeg2jpeg\r\nnw-session-id: 20260517152505804EBA96EB1587F6B92Afnztk02ff\r\nnw-session-trace: 2026-05-17T15:25:05.784406417+08:00 15\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-kfc-cachekey: http://a9rns2rl98/tos-cn-i-a9rns2rl98/rc/pc/super_tool/300d018bfca14b8f806db8865693686c~tplv-a9rns2rl98-image.image\r\nx-length: 462576\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 17 May 2026 15:25:05 GMT\r\nx-tt-logid: 20260517152505804EBA96EB1587F6B92A\r\nx-request-ip: fdbd:dc01:25:591::172\r\nx-tt-trace-host: 0115adc577c76a1d1a5d5d7065e28beeeb433b7b2b20b4838cc28815928e8be5191a6136a44a9e816caa868a4859b0d98e2ffba72dd748bcc4dca34a5b22097edb4cf36fb1925b06c12b85cd4028bef2dffc403edd5d6dc50ebf2bc4e3e07681f064798fc944f315fc458b44be1e7295c62cb0039da74050284e1b35315199f203\r\nx-tt-trace-id: 00-260517152505804EBA96EB1587F6B92A-7B1FCB5033F3C421-00\r\nserver: TLB\r\ncache-control: max-age=31536000\r\nage: 69127\r\ncontent-length: 462576\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6844680573701047349\r\nx-cache-lookup: Cache Hit\r\nserver-timing: inner; dur=24, cdn-cache;desc=hit, edge;dur=3\r\nx-tt-supplier-id: 0_27\r\naccess-control-allow-origin: *\r\nx-response-cache: edge_hit\r\nx-response-cinfo: 91.90.42.154\r\nx-response-sinfo: 116.162.172.57\r\nx-tt-trace-tag: id=11;cdn-cache=hit;type=static\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1792x1024, components 3","md5":"0b884f839f291e91b5448122db74c2d1","sha1":"2e8abda605c71570858e0777c182ddd823863ab9","sha256":"c99a1a3f63cd3eb81067c434e1446f53dff630c9f1f889adb43c95e21e79e107","sha512":"f085fa7971e109ae89d30a7d685a1948aab2d9dd3f423846b310ce835387d4886386a80de92bbeb12b3d847832fa7824a2486e316f802bb5db7e6915924d84e1","ssdeep":"12288:ESUn3sYjwQqK89Zv9AZhE1jvqt/EBkROitJGmjdB:tassbhEjSt/8mtUO","tlshash":"f1a423d2fd347aad84725de9989b04ccf090ce1d03ba46bd13d01abe916c6c7a7a8477","first_seen":"2026-05-21T08:50:54.763551Z","last_seen":"2026-05-21T21:18:27.371517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5740,"timings":{"blocked":1687,"dns":1168,"connect":263,"send":0,"wait":947,"receive":1404,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-XXXXXXXX-X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-live.com.cn/","date":"2026-05-21T21:17:59.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /gtag/js?id=UA-XXXXXXXX-X HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-live.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 21 May 2026 21:18:00 GMT\r\nexpires: Thu, 21 May 2026 21:18:00 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 21 May 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 116505\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":329565,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4775)","md5":"06c4a8f6adfd0fcb2605efeeb7b12f7a","sha1":"1e05c0b5c18bb6eaf5bab3594c5c887e5db23bdb","sha256":"178e9920574cd52b44c74f50fe0cc190c4c6c6e1cf2ca8541d7bd15191d2e5bb","sha512":"d05059a67b06ff902adca34cad4ab7cf5ae40adf3d63d6410fe631aace543f6ed4af195f2e43bb3b4834bd2ea9d59f9778fe6912a05ead59f831184395c5c4ae","ssdeep":"6144:zDpDlqvCeAnCa5qjxndXtFqGFCWUpQFEOP:zaCeAd5aipo/P","tlshash":"b864f9cdb3dab4624393a878903f114bb23a79d2f848c898f146d8d42e746694277f7d","first_seen":"2026-05-21T21:18:27.373588Z","last_seen":"2026-05-21T21:18:27.373588Z","times_seen":1,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":223,"dns":2,"connect":12,"send":0,"wait":25,"receive":22,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}