{"report_id":"dc243766-b4e7-47a1-b8ed-2c2ca73552a9","version":6,"status":"done","tags":[],"date":"2025-10-19T08:12:48Z","url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"title":"Teams官网 - Teams中文版"},"submit":{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T08:12:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"teoma.miocrosoft.top","ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-09-24","domain_rank":0,"first_seen":"2025-10-19T08:12:49.362506Z","last_seen":"2025-10-19T08:12:49.362506Z","alert_count":17,"request_count":18,"received_data":787703,"sent_data":8623,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:25.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":373111,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90782cd1b52816c3b0b2fb480eda6ced","sha1":"41cac2060bffe121a048db53e7f5a95761dadad2","sha256":"8d81e0eed5d2bae554aa3cbe25e453f2fc86f7bf92a64c392051dd40405b9abc","sha512":"bcb478b294f4848e0f8103adaf7b971527b5c6ceec700053412237e4383f51bf14c17b4cdf13778fb3b4e6621466ecb65feab964de4191364c9d5a0bcddd9819","ssdeep":"","tlshash":"5cb012c832074cb096f737404f3fbb04b0423224a8e1ad314d0a63485a30e07eb98854","size":118,"data":"","first_seen":"2023-03-07T16:35:07Z","last_seen":"2026-08-04T09:40:09.073928Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c99b8cfc5ddf0e9a6776f1f96e3e76ac","sha1":"655a6c6ca0b4d114d4a67e7437fae56290dc0940","sha256":"4b677341cfb03e73365cb01dbb92ac0b282822d28e4d1716e404815e6388c46d","sha512":"9c9978e0e841300ace00f57a5a2fad2c9e17513479eb8aace95a6497b05fb9deef5cfa520a3806b1a68e5b45c660cb936e6f3e384f7fdebfcfab2d3197ae0ff8","ssdeep":"","tlshash":"19315a0ab4f55992247b37664fbb51043e2b4a0f9248cb00fa2c5de01f9923abd72b5d","size":1569,"data":"","first_seen":"2025-10-19T08:06:53.862744Z","last_seen":"2025-10-19T08:14:53.005677Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-585137857","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"382386daafe51dd5cc9041ca7aae2f64","sha1":"2d289b2154bbabd3819f1bfda1f447a3b5b00d45","sha256":"601f39cb405e9a5782b15142b131b8acbac6a8af69322bc4a33965aa6c2851a9","sha512":"61f49306c260f0e3af6ab9143421fd888e42f8aa71b433dc287caa2ec0b1cdb2866bd90464ed715bf1a588497f0e05cb0b4bfe9c75d7814cf6ef99fe676b1dbe","ssdeep":"6144:qc6tQSy9+3V4nkEt7FLKWjxSqpRVpeAtWvkAX6HJLUy1N91UAK:D6rx3V4nkEt7FREqDexZy1RK","tlshash":"a18429cd73d6742693a2b078503f018ba57b69a2f84cc895f185cce42e74a9a4277f7c","size":372461,"data":"","first_seen":"2025-10-19T08:06:51.905839Z","last_seen":"2025-10-19T08:14:52.751079Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/js/jquery.min.js","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","size":85630,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-05T15:53:25.219441Z","times_seen":1127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cc13f21fd7d66940ecfe8f1d556675d","sha1":"aa9f74302a2b1d2b69f8dfdcf97e7fa1b0228e32","sha256":"7f2b2cf76f2edd78f93dd7a6796be0f791f70263db01db2a7bc2d82c4b812bea","sha512":"3a1a00ec62fbf8daa6b03e3d2546c30bc6e2817c521605ccc76eedf7e092a0cdb6160ddd108a3c7ebfe48da8603cb3fef7fe21e7e772f57b7d162d0b8b582277","ssdeep":"","tlshash":"36c0126d8438550874f321618e8f3208505780e30918e0153e1cc2787f3031ac377e5e","size":131,"data":"","first_seen":"2025-10-19T08:06:53.955024Z","last_seen":"2025-10-19T08:14:53.025717Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/style.css","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/style.css HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 13:21:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d3f06e-2d58\"\r\nexpires: Sun, 19 Oct 2025 20:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"b4db58d32975c026e627558714b76517","sha1":"4987bd96258f4b2e7f4ed241dfddc0ac55064315","sha256":"159232d52c71a8ee8435268c1083f17006bd4c398defdd35b2ce752ca413db16","sha512":"662800f11c1313bb6592e47bdf228aa07a4f9fa6d6200e2f6299e71e5241e168bcc83dada16c864489e9e1656914155f6c45249ad1754ac641aa4a98e045b7c6","ssdeep":"192:OtK8UCy8YQvx1pN+LrLSVBG7iDtST0HPs5YQ6:rrg9vMQBGOtps5w","tlshash":"a83263766611712cf03bd562f8c16bed3138c013e5a74bbdeb15a939c6ca0ab1562f8c","first_seen":"2025-10-19T08:06:52.345456Z","last_seen":"2025-10-19T08:14:52.681085Z","times_seen":5,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-585137857","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtag/js?id=AW-585137857 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\nexpires: Sun, 19 Oct 2025 08:12:24 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Oct 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127392\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":372461,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"382386daafe51dd5cc9041ca7aae2f64","sha1":"2d289b2154bbabd3819f1bfda1f447a3b5b00d45","sha256":"601f39cb405e9a5782b15142b131b8acbac6a8af69322bc4a33965aa6c2851a9","sha512":"61f49306c260f0e3af6ab9143421fd888e42f8aa71b433dc287caa2ec0b1cdb2866bd90464ed715bf1a588497f0e05cb0b4bfe9c75d7814cf6ef99fe676b1dbe","ssdeep":"6144:qc6tQSy9+3V4nkEt7FLKWjxSqpRVpeAtWvkAX6HJLUy1N91UAK:D6rx3V4nkEt7FREqDexZy1RK","tlshash":"a18429cd73d6742693a2b078503f018ba57b69a2f84cc895f185cce42e74a9a4277f7c","first_seen":"2025-10-19T08:06:51.905839Z","last_seen":"2025-10-19T08:14:52.751079Z","times_seen":3,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":52,"dns":0,"connect":28,"send":0,"wait":68,"receive":75,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/banner.png","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/banner.png HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 13:31:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d3f2a4-16875\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92277,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x770, components 3","md5":"6c69d2e48e6ead97ef4f75c4206a83a3","sha1":"cd8ad58cacc14b4bb5e091c3561d9ead4ed825eb","sha256":"41fd03f87d7ec4efc148f36f909b99085d2e66a0d0714a1a407afd82023beb2f","sha512":"9a954d741511400d7480c0c5fcfc752b07cb781fcb2c2f3b9a37f9ba5eab522d88d154709965c53a0a53ccab7844a0488bb472ca6fee62ca3ada9151d0a354e2","ssdeep":"1536:KNLp5HWJhG/8uUfMR2xpWoBEA3H9kDbBgBWmR+zLFlrB9+QnE9da7D+RGq4:KJEhG04RX/A3dog74nFFBkQnEzs+RGr","tlshash":"df930261afb034e3d6546eb605821394bbe6bc6703c301a8b7eb6caccd77a046d525c6","first_seen":"2025-10-19T08:06:53.434168Z","last_seen":"2025-10-19T08:14:52.799928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/1.svg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/1.svg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Sep 2025 19:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ac-b81\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3236cdac34962730a4a756ecef3f3d50","sha1":"7a55b3d06f8748370dbd1d49e82acd3722bd0eec","sha256":"6693ef016fd8f4a720ec2ce02bb2d6cf471ace9aed95c3187bb7b2e689ba1765","sha512":"2ec3de8b5eec31b8eaa8143462c582cbf8b26d3cc2a295461013919780523abf65ce63c6b042e5af4c84240172d4a827159ffed991f6b231874fcf26a3c08be1","ssdeep":"","tlshash":"195130fd763407e9f93417c56ef228ce611a80f1da625670c2a6df0af5db8588e45c12","first_seen":"2024-12-12T19:57:47.872355Z","last_seen":"2026-05-19T09:15:25.903322Z","times_seen":57,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/uploads/2025/07/microsoft-teams-1.webp","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/microsoft-teams-1.webp HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23946\r\nlast-modified: Wed, 24 Sep 2025 19:17:22 GMT\r\netag: \"68d443c2-5d8a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cf423b22886f18bf48a724c97137f1d","sha1":"7c94f4a0f83e9e705e3f8825b0a7ebd98fe7b47f","sha256":"6987eca8a023ded4f395bea5d276440c56420a7fab292e2e72a41d59821f57b7","sha512":"f8981fd151cbe3eb8f6663f674069b8d7b12769a32b1ac5e25854b80524f9d9d35beaa7ed306a0e1fc110216d93c2ac7a29860d7988a1757c1625981258935f8","ssdeep":"384:hpWwMqdyuVA75IP7xuhpGOeD/vD8w0R9+WJzcvpVZEkvtFvjrEZjXh2Wsnj+aa8:hpWZvH5cshpGfjv4wpWOvpVZtLs92WsX","tlshash":"d2b2d1a2bccd36617cf7ca019de766cbc087ef87d583a2440ed345571885492e87ba03","first_seen":"2025-10-19T08:06:52.435789Z","last_seen":"2026-02-17T04:37:55.160097Z","times_seen":18,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/uploads/2025/07/maxresdefault.jpg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/maxresdefault.jpg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 24 Sep 2025 19:17:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443c4-c72e\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"0a0447d4b988ebb9fcaf9b5b6f82825e","sha1":"01f13f3e2c95e836e89498c90d9ef1d6c5b92501","sha256":"b220eddf8442c62b2fd9d93d8e3824d5ac4a94bf88e6e403e53ea6f940c9c59d","sha512":"5acec44583da01090909a231d382d663a6af5de7079d341d478cfb5bb1455c86a535f5bcdf2cad744754cafb3adcab47ece2898a87747a6d262350bbc091e82f","ssdeep":"768:MEp0uB8zuQbYf7OF1IMcBhgwKYRr/UVMv5O3RPiahYRXCJiD9sWTzXUJaEnFdQ:l7O6BfCSMO+wnRrcVNYeiDxzEJaoQ","tlshash":"2b33f2e6b79009dafbd8553180b1144cb8d9d89bd5a2e7bb8acc08cff4b13ad0959d12","first_seen":"2025-10-19T08:06:52.668535Z","last_seen":"2026-02-17T04:09:34.606634Z","times_seen":7,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T08:12:23.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Sep 2025 15:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d40828-850b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Yoast SEO:25.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34059,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363), with CRLF line terminators","md5":"be6179df2e8ccee17795b93226256afd","sha1":"e1f190bdabd54c9f5d60a4835eea2df9a93728cf","sha256":"179b590e275fefba450c15b371620f6141c51bd3c97030d791dd145983890faa","sha512":"4e0f3e020d8a3db2cd835bcdb53df3ddcb35d9b48a4a7f06605a7d4035189cb1f8e409d1d186137d47f9ccbed18e798365843de7e72b09b0eed5feec17f8e59a","ssdeep":"384:WQ6oy0Mpwy9+ZjF/MsgPGIRinVHSJTIkWEcq5I:WjRp79BHlcq5I","tlshash":"7ee24439e5f4c03b45ff7286d92a6ba4f8878743674887f2b1ae045e2fb26588d03547","first_seen":"2025-10-19T08:06:52.764794Z","last_seen":"2025-10-19T08:14:52.676014Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":524,"dns":194,"connect":165,"send":0,"wait":168,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 101\r\nlast-modified: Wed, 24 Sep 2025 12:59:32 GMT\r\netag: \"68d3eb34-65\"\r\nexpires: Sun, 19 Oct 2025 20:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6094661d8923e95b233019ebff7c8f0","sha1":"cfd836d385d475baffee45d85cfeb9bb36e70d9e","sha256":"547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a","sha512":"b5684920345ccc14419cec135d43521bdc9b77618befa0096e11e33414dba09225ffe8e19ef10f3d75a74a086cfa40be2ebf3a4310fa6395e3e2d407a7451995","ssdeep":"","tlshash":"5eb0120b56b51c0700051d30bb0b80ce213d291e43b65004284711fcfc16d781316c9f","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-08-06T22:22:59.232977Z","times_seen":26133,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/3.svg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/3.svg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Sep 2025 19:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ac-72d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"831aeaa2a97582b14c9659f3a0c74352","sha1":"a0b6db543390122c611e90c0fed11a79f714872d","sha256":"31376c473affd3be5d4c5b67cb670bb2782cd9b8c543d11d25d346d4ba9d9bab","sha512":"dff63a085e70d5646ed6b66f42a3fd86729944c6ea578ec8b7079e6210b7c09824eab21c56e7e45227d3824c9ca9e3026716aff265f53affcf4da74dbfc0549f","ssdeep":"","tlshash":"933142cc6b3886a0a46083aff56490af760da0e569430670c95a1f4df40b9f9cf16acb","first_seen":"2024-12-12T19:57:47.877269Z","last_seen":"2026-05-19T09:15:25.906198Z","times_seen":57,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/uploads/2025/07/2ef74e3dc9647c29a5adfd473dd3294a.webp","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/2ef74e3dc9647c29a5adfd473dd3294a.webp HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43376\r\nlast-modified: Wed, 24 Sep 2025 19:17:28 GMT\r\netag: \"68d443c8-a970\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ef74e3dc9647c29a5adfd473dd3294a","sha1":"9acc8c3221b9e26fad0612fa0bdf050b98a9da30","sha256":"27e08a72cad13903398da486c18675cd7e4b0289e12eb21d7e3ead553103a9af","sha512":"87709125b1be4330e3f91cf1b91dd3ca034c300bf5f15734435eb453ae1931a98a7e18cfc5bc41046e069143738ede9cfd7257a55003117fbb2382d342de5753","ssdeep":"768:kD+qhPG7tUn/sK/pkOF95i2dtB548KKb/prCX5cmpFcyMqxtihHbB2IJ:kcUBkO35i2TBVKG/dCJXprMqOhHlH","tlshash":"d413f2566889f8d6de98fe6c66bdb5d00e4298f8c917f3eb05f36212b0384cb405b601","first_seen":"2025-10-19T08:06:52.533786Z","last_seen":"2025-12-09T05:18:18.613886Z","times_seen":8,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/uploads/2025/07/f47767e79757f2da9a14bca3c5e73fcd.jpg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/f47767e79757f2da9a14bca3c5e73fcd.jpg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 24 Sep 2025 19:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443be-3f67b\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1000x659, components 3","md5":"f47767e79757f2da9a14bca3c5e73fcd","sha1":"c49eca127204f97a26ba64030ef52384dd63e8f7","sha256":"2871d33539adf469a3d9ba1c91670a71dce84e8ce9b5125e270c781f9392cbbc","sha512":"be03b8605b13f96ee60ea28bfd171a9745a403e23643fc5e5d64dcb01cb5d1c16e5fd7fc8cf5e771a4336ba77d7d0c7820c09ec56d756a75dcbef5f6e2eb74d3","ssdeep":"6144:7JpT4+cRj2siiiD1YeMyPj9b96r+sF30MIksmqmT8Mw8zCB8h1aXy:Tjctqj1Ye7PjWF3X4mNXmOPaXy","tlshash":"1444132c62f46567dec64d3a17e67403ab5a08a79d2526c4f119ec30e0e428cbedce7d","first_seen":"2025-10-19T08:06:53.303363Z","last_seen":"2025-12-09T05:18:18.589334Z","times_seen":8,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/2.svg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/2.svg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Sep 2025 19:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ac-641\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77e9e7c69f23821ee79746290aee0366","sha1":"47d337bdfa45476e9a6f3b1d426691d3c003076b","sha256":"235a74286d92933b70775038f4a960172d7ebc7640734e428e3a846b561599ae","sha512":"b86e2ee3eb663228e79b09fed406bfa9b988856d206cd17bf38a5718c1f1a2a1ee8950ff376953990e64eb3bf65bc7c6666e086314955b029cfcbadd3312da94","ssdeep":"","tlshash":"243178fc63264779c442c7c1db8106843d5b74f7b9805e30c791b66e701e5595658cda","first_seen":"2024-12-12T19:57:47.874874Z","last_seen":"2026-05-19T09:15:25.887091Z","times_seen":57,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/4.svg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/4.svg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Sep 2025 19:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ac-5c9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c3dd727f103263c268ff088ae87b89b","sha1":"5926007be35339cd45c787a7589e8a28bbbce609","sha256":"1336a9ac5090c7f963f97c8c3b8046b25c64f29219d4911f05420d6b59cd772d","sha512":"b08ce8205d9a0d25add361480b67891bb501e321706af9a1b9234349f981b5d2e5c84ae6c5906cebbc3bf68978d40c625b90997863911513fed00ec5d3873d4f","ssdeep":"","tlshash":"8f3140ef97ad43d4a884e345df247444160e30eb38c38e64db7d691938a93aaec1bdc1","first_seen":"2024-12-12T19:57:47.87938Z","last_seen":"2026-05-19T09:15:25.887553Z","times_seen":57,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/rwm.png","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/rwm.png HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 19:17:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ae-72e6\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced","md5":"1c00438e7ddb604d90013e93d216114c","sha1":"f858a659f120dbfb6355602d6b756a998099cd94","sha256":"4fe9cf174c8b7254ba5ae827fa7fa91a4846af97d999081b3de3f1bab2d81aad","sha512":"8d3fca211195e1832bcdd560ef5db6530933130fefa654c0482827400956833fb5cc1dba290dd7c96e59aafea588e630d24290bd66e345f800f4a955182447ae","ssdeep":"768:zXvr/FvpFRGk45on/5lrgQk6IswCkFWm5JIhAcnr843mCOu:jTdvlGkk0hWQkN/CkW8IxrF3mk","tlshash":"c7d2e123047a9a28fac0369345cfbc091d99d3e47a96e18737db32d68c4bd04ac6fe45","first_seen":"2025-09-16T01:02:59.527442Z","last_seen":"2026-05-19T09:15:25.891775Z","times_seen":18,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/t1.png","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/t1.png HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/wp-content/themes/Teams/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 19:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ce-19bd6\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 785, 8-bit/color RGBA, non-interlaced","md5":"f11f355d37bf2daa851ad2361832d752","sha1":"97af2ce0dadbd522606e29dcdfe5a0bc8087e5ac","sha256":"5d5fbd2e52540ca284e57e9c08d58ae0db9652098283549545a13c17d324bb79","sha512":"ccc5d5b30ec58757be9abd7e2e0a62677ff1cf468fdb7f91c93615fd677ff917fbeaa702f6ad4ffc1ff41a0833b9d075b5833254835f0a28ff6b7924112ea2e5","ssdeep":"1536:l7rbcUxsPcwMFS5Td9w2+XsoEVZsM8rVVh6n9OHgaVvevVg:lwURf+dGGbsM4sn8AaVGva","tlshash":"45a38b67da20257bb66156a56613668790711dbb307cee1a0bc3792f5b2bfe8fc30c10","first_seen":"2025-09-16T01:02:59.415816Z","last_seen":"2026-05-19T09:15:25.876862Z","times_seen":18,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/favicon.ico","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:25.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T22:47:00.199431Z","times_seen":546993,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/js/jquery.min.js","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/js/jquery.min.js HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Sep 2025 19:18:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d4440a-14e81\"\r\nexpires: Sun, 19 Oct 2025 20:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85633,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-05T15:53:25.219441Z","times_seen":1127,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/themes/Teams/images/logo.png","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/themes/Teams/images/logo.png HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 19:17:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443ae-fd6\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced","md5":"9f14c20150a003d7ce4de57c298f0fba","sha1":"daa53cf17cc45878a1b153f3c3bf47dc9669d78f","sha256":"112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960","sha512":"d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487","ssdeep":"","tlshash":"d0816d07ff018801919ee9570485507acb618cd1e7f91061a987c825c9b5cf82abcde7","first_seen":"2023-04-05T04:39:01Z","last_seen":"2026-08-06T21:00:01.504068Z","times_seen":12196,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teoma.miocrosoft.top/wp-content/uploads/2025/09/record-microsoft-teams-meeting.jpg","fqdn":"teoma.miocrosoft.top","domain":"miocrosoft.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teoma.miocrosoft.top/","date":"2025-10-19T08:12:24.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teoma.miocrosoft.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 11:40:31 GMT","end":"Tue, 23 Dec 2025 11:40:30 GMT"},"fingerprint":{"sha1":"8B:86:A7:44:0C:DC:C9:56:0D:3D:92:CD:2D:44:E9:1B:ED:E9:91:4D","sha256":"13:A6:62:87:64:19:7D:D5:10:E0:B0:0B:96:7D:53:C0:DD:E5:AA:BF:7C:89:93:47:19:9E:79:CF:95:4D:1C:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/record-microsoft-teams-meeting.jpg HTTP/1.1\r\nHost: teoma.miocrosoft.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teoma.miocrosoft.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 24 Sep 2025 19:17:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d443c0-82ee\"\r\nexpires: Tue, 18 Nov 2025 08:12:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"82bc98a20a0549388b3c6594a3bd0c33","sha1":"906837b6dfbec24ff4373f5c6bd902c6120cfc10","sha256":"1e0d57ba664e597512481f9d35e8fac53dab1ff0aa40b23e0c3a88af2b6c1fc3","sha512":"b5163f48ad70b0ef4e1a230cc97894ee226f2971cf3b5dc7a3e66a62a1ea94833f3f4e28f1c313e4073f0543bd7192855ae3bf6553fe2c5a5e013382fe75f8d6","ssdeep":"768:KoBPjhs+LbOM9raKjgvKkmqQMYlR1vgDVCvrGa7:KKPls+fBaKjaK5gYlXiVCvrGa7","tlshash":"93e2b04aaf504502f072827ac69f6531ef7ac8706d3be9e0a790fbf9d577281bb01590","first_seen":"2025-10-19T08:06:52.224579Z","last_seen":"2026-02-17T04:37:55.152356Z","times_seen":17,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"teoma.miocrosoft.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}