{"report_id":"e1a9c15e-4f5d-4406-bea8-59204b139492","version":6,"status":"done","tags":[],"date":"2026-03-24T01:02:58Z","url":{"schema":"http","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":0,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"title":"Sharing Link Validation","dom":{"size":69564,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30522)","md5":"d40fbe20bd648485a1cfc14fb210d53f","sha1":"ed0e21b891278edab89b98b89fa0104e536ee8b3","sha256":"437dc59c9b0d119600f08457cdd749a1a9613dd254c3faa84f3280ef9e7c3595","sha512":"59179c12430ad14a911d4efb6026d593ea8542305fa360c1064951fd7f72123f63ed7cdfc832e37141b69d147e962f8683c4de7f14a9d4034e87fed1484696a0","ssdeep":"1536:agg1OpWIwcYWXBOxSPSW8N6fGNNKJbQS5mmxQSdVJHrKQUgvLKV/:W1KCGeTKJfmUQGKQvv4","tlshash":"5a634bab3ea17453a26332e4506fa04a717f84732508c850f68ce8f49ff99985677f6c","dom_hash":"domhash99c20f14e3c3ce59ec8c3236bc6830ed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":0,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:02:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"res-1.cdn.office.net","ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"1994-11-14","domain_rank":990,"first_seen":"2020-12-08T13:32:22Z","last_seen":"2026-03-18T23:23:01.452586Z","alert_count":0,"request_count":4,"received_data":109750,"sent_data":2022,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mydrive.effem.com","ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-10-25","domain_rank":2948748,"first_seen":"2015-12-17T16:08:18Z","last_seen":"2026-03-19T00:13:03.048573Z","alert_count":7,"request_count":7,"received_data":290854,"sent_data":4460,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"73ea264a886e49ff2492d22a673c7ae6","sha1":"6bc2bf1be967675737adbf98a4d163fd73aa1a97","sha256":"ff66558921b3a5104ed93079f79d428c7443e9a8613cd4594bb0d1f3e6728f95","sha512":"d047d017ca4e0a94f3954a65e933c1bf19964d9bdfd277c436d64b7b6d74b4f3f46b8e0e84c83b5b079f5b126b095967f3291dffeeff24247807fcf79be7d59b","ssdeep":"","tlshash":"58a00252475e20519f6d2214528952140554adb36251d0b0434c16a5d9f4ca263d9f74","size":58,"data":"","first_seen":"2023-04-20T08:17:26Z","last_seen":"2026-06-12T19:31:04.203208Z","times_seen":1848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e99831d62ec99e199130a0d9791e6e1a","sha1":"566166337bff530ff65c4c66c3d83fb1c8cfe583","sha256":"0fc0c149cb8b20ec3dc9f991249a92c06ff7fa56ec313e5c754ad5e38a38ab2e","sha512":"2fff93120c95df6a0ca17eab0586cd20c189b9bfd750920fc4f43fd0e4db68ea11c0c3c6f351239725ff2db866f9693c42c2da52a205b4cabc0a4dc3c74720c1","ssdeep":"","tlshash":"41d02265f4083216486f24bac2ff820bb35e33a08e10882a2631329918ab517c0f0a0e","size":201,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.844242Z","times_seen":1708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/WebResource.axd?d=Rkg8vqW01pJgqlTzzY7WRUH8A4NecWtyqCOxbjHCtKTZd12BqD6FBZqQr_SgOPhvdiU1pIOOWR-yErziKRNEtog2qRLCqrKOkDISewy3tiI1\u0026t=639081453183982065","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90ea7274f19755002360945d54c2a0d7","sha1":"647b5d8bf7d119a2c97895363a07a0c6eb8cd284","sha256":"40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db","sha512":"7474667800ff52a0031029cc338f81e1586f237eb07a49183008c8ec44a8f67b37e5e896573f089a50283df96a1c8f185e53d667741331b647894532669e2c07","ssdeep":"384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG","tlshash":"2ea2204c350622348a7bbb7ed76bc39cfd7a907729049071b85c99991fb0e6012e5fe8","size":23063,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-13T17:42:40.961808Z","times_seen":37618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b58f567754a54bfb74872f6b6297dbe8","sha1":"c4ffc23f1c05e7f44564fba59b726bc9c78c9d8f","sha256":"e397d0f4f212bdd31698bf6f27a72fad9624a86667d9532e77170ec292dd885b","sha512":"64405f28ccc57ea0eab87eb55fdb5bfe9e5cd70c739bfaac253a205d05c00467b9a84513064a8c252097fb753b1861119eb63ce7050c420cd21da542e4f107b0","ssdeep":"","tlshash":"0ba0026424607297486f1eed6b177c9805b859a025049945c914fce408b7a751a2f45c","size":63,"data":"","first_seen":"2023-04-12T07:08:29Z","last_seen":"2026-06-13T17:57:25.134833Z","times_seen":2629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ca7a36b4676a218012a6a37c6ed52b1d","sha1":"dfa42b6f06edc8c46882c5432990acf617b46d6a","sha256":"15a74e3c38e2c14cf0f46edc306ee64d7354e2961729096f12afc6ca7bb4ae86","sha512":"dcc6caa9076967532bbb2b3fa93fc01e1e406e3d7d54f63ee705e6f10743bf1370e34f4b69ce2d244996d58cd1b474c73743251db7db01e2ded85d813ba2597b","ssdeep":"","tlshash":"03a0026471507145447b66ec26176888017541e06100894545949d7428a7a750f5d45d","size":58,"data":"","first_seen":"2023-04-12T05:28:36Z","last_seen":"2026-06-13T04:19:38.628943Z","times_seen":6861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0b72a6a037035b4eff3419e96077466f","sha1":"8c28a8c6e802ebaf366dae7ccd2a612950c5f3cd","sha256":"e4ffb4bc795417b1267da37f5a5d16f91e993a36f7eba9a9b508888f8ed218c3","sha512":"4ace834e01613e4e0ffba03592ad31d84a3aa93e1ddcc7376ed34e27255ce9bc9b748fcb3d9b1f9a1569a81ab2a7e09a42fb651ccaac2c89d79e0504dad93289","ssdeep":"","tlshash":"dcd022c0814234faa81e62ad07e239f9713401e01080661470c08f102592e3a46b1929","size":200,"data":"","first_seen":"2023-04-12T05:28:36Z","last_seen":"2026-06-13T04:19:38.612856Z","times_seen":6833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58616e3232a89a4e7d71a17c729df088","sha1":"889970fd90a58dc2def79fe5f10aa72d7bad37a9","sha256":"c5f16a23c8b84b9346b54433839636f4780538ba10034ea77f53b1a569bd1a99","sha512":"65be4a791e5ae70604bd7082ab308c3b9a08b8eafababa8e9ce9549ba10789ea389d178a78378ed8609cbe3d7a6d9e6f6594d9ad6d90faf4f1d2686b86e31f50","ssdeep":"","tlshash":"e4f0c0e34ac4e546fbb606ddc72f32193186829f39764f01215d142877c5007a87a99b","size":558,"data":"","first_seen":"2026-03-17T15:32:47.638107Z","last_seen":"2026-03-24T16:30:55.602032Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2798d638ffbab53aac53edbb77f033cf","sha1":"0d00591b9087e0c4d8c71bb3c9c8fb66182c6302","sha256":"9cf36f5ce810b25faf65809e1b7c8eb78f6cbaa8a4485c25fb6b8ca95c8d20d9","sha512":"9985024ebbdc3a15e514695d849835acbcc74b47d39c58243ffc607f6794aff24a472cf3a2144ebbd3a76d2ee5b03c77a2175ca866428bffe32502f5ee577ee8","ssdeep":"","tlshash":"d9e07dbb7a444e8f030026654011bb5e5b1c01a3404388729da52f9913f39240527252","size":316,"data":"","first_seen":"2026-03-17T07:07:28.860223Z","last_seen":"2026-03-24T16:30:55.603791Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"62b075680a2d12f6f412fd59eaf41eca","sha1":"fd9332a703b1580f8ba282fe23e8b416bf219523","sha256":"c84c38a8ff573d4dde2cf7482a0c4d0d9c2584657a3fe6e522300809b0750448","sha512":"743b56e7338b9917fdb129bc21d802896446c77ac85fd5cce611a01b1c4c5efaa76f5b7273204b1e6ec30fffdc18a9e0224ac4105500da2f1bbca9f3ec4e6e45","ssdeep":"","tlshash":"6b9002eca034d1542c1314bd007b8af80ce9fca0640451cc12cf984024a29945b07804","size":56,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-13T17:57:25.18539Z","times_seen":13384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"427cd803e9635f818d0434cfa74df413","sha1":"998044c6e95b91b434bb7c6dc2a7a1fb81caa0f5","sha256":"9c5a7946e98fb865ae2c2b3c8a9c63f452212a9491611a7292bfc9714634b61a","sha512":"d6bb4bc6e5d8f160e0a0e1211fdc7adb005d8c89d4195707199bf709cea8dff837e9b013024caaeacbdd70d51e65f0b75c2d0213dd80be61041717d8bf7b4832","ssdeep":"768:NWXD1OichQPLpsDq5ORoS2SNMEDm8N6HF/FGNNKA:NWXBOxSPSW8N6fGNNKA","tlshash":"3fd2d5dd3ae1f483a3a371b4402f500ba2779866244cc0a4f754e8f5acb955ca667f3d","size":30525,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.846763Z","times_seen":1706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c205666d9e2752387b658854cd33848","sha1":"dbb10e0a46511ddc15df01588ad54dcd39b66459","sha256":"9fd29f36ace1c583803b317a24056c4e953d6353dbbd72349de40d4a2580c6a2","sha512":"a66dd60ca5c11ca3df02dbc575d16820b45db0e47c166774d73b66f9c0a4afbd014a193a2ef5b66ed0c87443a9f0b449a074ef19c4b1f07c8d7e9653c4aa0aeb","ssdeep":"","tlshash":"ed71656f4af6151760633389551f35293fea91c31a06cd00bb9cf6453fc543261fa9ad","size":3508,"data":"","first_seen":"2026-03-17T15:32:47.646412Z","last_seen":"2026-03-24T16:30:55.605824Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a892234d7827c60dfd8a6d8c1572a8d","sha1":"7f881c8e538c5e97fe4b22ae4970a520a758fd62","sha256":"453c318e5b96d76051ecf37b57f0217d7b4e142d9f1d077875f42206ab9b2e53","sha512":"bb66b3a0ba971af4b7f038f3ec23ce7069a7317e7eee9c8e79919eb8bbe0ad2f8e5de0a04de72f793d9e3f82b352084002f006dd2842e09fe33c32151ffaa7cd","ssdeep":"","tlshash":"4611c06fbf48475b99526292f42fd44e62ebd80e1f71cb80602a2df7a0775380132b99","size":911,"data":"","first_seen":"2026-03-23T13:53:27.362184Z","last_seen":"2026-03-24T01:03:00.544822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e93e4739545971d7456376465212bb78","sha1":"4a901d6ba52bea30cb2a72b1967921b526c8439e","sha256":"c0579681aa9f72c37e8c845451c7afa246fedeb08d3c35453db1d5172382fabc","sha512":"d5c359344ba0808ecc03ca742641d79c31b14990dde9ca025dfddcc93217f3971c0d2e8be5fbd116751e3441ee9bd47591709dbd5047c4a045ec5f2b1a13ddcd","ssdeep":"","tlshash":"d00140b3ad5d456a19f91aef255542dc743d89332c0524a26c4c2e719061faf809ee50","size":771,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.849542Z","times_seen":1750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a48979f7f0be1c1d0fab1adc5c4f7ede","sha1":"c31ff08c3937293e43e5e78c108b82e07ced461b","sha256":"68946a0e5e672ac400e85220a6faa5d2b3b3baaa57a0fd3ee83fb82787158831","sha512":"db45ea12aaa4d79bdda63a6c8aecda7b66eef0b4c25fab5876142bf5422657aa22f5a2d4b119857b8be78ce203e227408734026c1f1ee8886db5dcb875cb8b4f","ssdeep":"","tlshash":"2ba002bc6178a5196c1350ee807783f84db8bcf47404948557c7a59029659d95f07c44","size":67,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-13T01:35:38.640108Z","times_seen":4428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb9e685e178957c1f8a490d1db11ad06","sha1":"6be51af489f35d43446596aae76fb7d9e7658a1e","sha256":"928e2ac1c8aab201b95426d675baa335deb6cfd5809e82fbc8ac88886924714c","sha512":"ac59350f9cc1de4f273cd29ec7bc6fc9f318f88f15d760383f62f324636230ce6d212b4035f3c299afc8ec3db5faa803cb0d85c1637c028b60f264ac3fb74afd","ssdeep":"","tlshash":"19a002bd22b8a11c3c1311ee847782f80de9f8a0650850c593ebd4a128b59956707858","size":63,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-13T04:19:38.58192Z","times_seen":6643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12ffe69b1290b6ef7408703676e33b06","sha1":"04bb4dc719a4597d3a3903d33f8043e920b82e57","sha256":"1eaca83e0bd12a46c87f49fbec67944ff92916398df6e6751ba3533a3dfdbb21","sha512":"22e6b4f1605d1a3185932ebafcf4fed8d8e60da949f22b6100047625a0b0a83ceb4b4bfd728ac66a35f910f9c0b3bf8d4babf794c63888a81e54e4fba6a909ce","ssdeep":"","tlshash":"b3e0d80456af17f5b307ab2803fda2431f7486f5e00465077c4f3d900f21e384695b51","size":371,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.850138Z","times_seen":1707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e63eba1b8eb3c0e588b12b381d6204f","sha1":"95e646821dabfc4171bdd398b59ec0836a4c581d","sha256":"954d5f375110051c45751f29475df70e3ebb4608c679a28b3729e5a605413c75","sha512":"dfb3c132edc0a917f4d652ba4b8fe677117173256d54fd28d9f3a41c28e7540a7a451f769f0161b493ec542d5188a069cf2a838c80de6b31dd1dda298f8fa0ac","ssdeep":"","tlshash":"94900445013d0111510c3ff110f3d0471c14c0f0015407c0f4157174c554d4347557cc","size":41,"data":"","first_seen":"2025-10-22T05:24:03.554697Z","last_seen":"2026-06-10T12:33:20.338472Z","times_seen":749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e0a177d241f0e82ce4f00226b733ef7","sha1":"a5d2e3dd3b9a3ddffcd17d5d3406f14ddfdbdaea","sha256":"f74e86cdcc332b7350f0c9697c6635680926b24c4022bb468dd78eecbcec18fa","sha512":"907f10fb980239438864463baf383c4c80b583686a723c0a93e9818ade7cf2a66472e605cbf950ca75aa4f50a3b4c12c3970c0b961f935f2f433bc7044300d82","ssdeep":"","tlshash":"56d05b5d66bb65198775307c004bc044d89d6f7279581058d6c0198d7dac9748365e9e","size":262,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.852638Z","times_seen":1666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8233eb45206e0c8a6e61f33538cacefe","sha1":"4099d87aef8a331819ec64dfdc123a50bb1f1080","sha256":"32a675cd243975a98bb59b97ae716bb451d5845da15d13ba62deff915bd1e589","sha512":"b4753985a48d9b802bac30a38534ab1581dd97cb165575b89981bbdf6265126919733eac3419512bf7b62439e215403896a368be716e493b65039d79bbfba03c","ssdeep":"","tlshash":"62b0928f621b04a6964861b3b072acd68e060da7a4e204601e2a066d7c3b4628b54a8a","size":115,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.853184Z","times_seen":1702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=ZuEb2wkLGRjfj1xLGpSyHsxC316xu5TCCh5j--ED_UiGRDwktqUUqGlECySy5BR2BH4eTao92hF8bWC1YMe0FdPzJ_IxRyoKjW3L6HLzmZPaOyzVT5fuSwY8VhwFM3eb2sQWnbe0AbdwBTDyXq3T7UHt6vrsVY7Ptqbw090XgGuBnejUm6KVs2798wmIvNQM0\u0026t=5c0e0825","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9dc1c32e89c02fc1e9eeb7e5aab91e","sha1":"3efb110efa6068ce6b586a67f87da5125310bc30","sha256":"398cdf1b27ef247e5bc77805f266bb441e60355463fc3d1776f41aae58b08cf1","sha512":"d4730ebc4ca62624b8300e292f27fd79d42a9277e409545df7dc916189ed9df13e46faa37e3924b85a7c7ea8c76bf65a05eca69b4029b550430536ec6df8552a","ssdeep":"384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE","tlshash":"a203eac9bb759135c1ddb52a513b86877b2ab023250480bf7910bede0a7cac3552eb39","size":40326,"data":"","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-06-13T16:56:40.531426Z","times_seen":9564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c8232d108e433474f59e488e92ee436","sha1":"94f9e97b5290d8c3200a4435c4623b756d10cc3d","sha256":"5db6c3d9ac17d519b4012f20eb429dba86b38c951b2d7c202fb9f84b54e7ef44","sha512":"84c6cdbca3b6b88cd98c4439b36c9b3a39f537cb4a43ba1c6468ad6f4ca44b85badb009c2d84a4eb6d211617d0ae561fef070c717281ed0b0de003b19ae0d18f","ssdeep":"","tlshash":"1b51fddab78c26fb5d6730bd455b40cea57c10728d09183a7ce4ea1404bce6c536ed78","size":2481,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.855018Z","times_seen":1703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8463c179a7758484b7f4970757928c78","sha1":"fb19aa940fda7e46c6171e87c55b361e861faa3a","sha256":"cfbbc926117d798b396e36e3e08feb87e9c57bbda4e298a4484b84edb11d4ef2","sha512":"62c4cab9f949f88a744354b9a70f06f477bbf3efb61205e023b8ad6a9838f6dea95ea7710da61b31bed7e33c129c343a4fbceabc18b95ef0f7e2a860f5147818","ssdeep":"","tlshash":"c4c0126738820af06ede3afb2224d6a838ba821038452001094c0b288126f819279a86","size":188,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-04T20:10:23.855674Z","times_seen":1613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b58ca09c1bae7677d1143c5171ac351a","sha1":"a49732a9e5139afad3a116594aa1a2426b8024de","sha256":"e04c61acfd60494caa787ee7d03354c99c30f45fcd8c6e682fe2210431cdee18","sha512":"3ef6c22de01d2bdf65faeb0957395351fd3df32f7b4bbab9851acdc2458faf14db730f5d6e7e9e44d77cc675d6df881ff7e08d8908149f6f76009c15af378b4f","ssdeep":"","tlshash":"82318b262e2437e66b8270fa3051c2f1b9b6637019097c096a9e534d51feed4b96e283","size":1455,"data":"","first_seen":"2023-03-09T12:27:38Z","last_seen":"2026-06-04T20:10:23.857568Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d37e62ba7cc74538812556c35e6c3003","sha1":"dfda65057a7c8731e12e45ea727e12c6e982f8d5","sha256":"86a89ff646f43502ac7979d81f6cea5b27a4138f51da76c6e324dd9ba1fbce26","sha512":"8292822be9e62e8d13ba197bd2a932df21d274a08dfceb911b8ac3d6cce98590a88129a219061b79cb937aedaa2e0f0cddca6a9ade58d6baedd45dd473ea439f","ssdeep":"","tlshash":"3b70000020e0aa28c030020a0328803008208200a02220b008a0000000a02000c00002","size":18,"data":"","first_seen":"2023-03-12T15:13:42Z","last_seen":"2026-06-10T12:33:20.356549Z","times_seen":757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-1.cdn.office.net/bld/_layouts/15/16.0.27104.12006/require.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6efddf589864d2e146a55c01c6764a35","sha1":"efa8bba46cb97877eec5430c43f0ac32585b6b2f","sha256":"2d92f0ce8491d2f9a27ea16d261a15089c4a9be879d1eedcb6f4a3859e7f1999","sha512":"1afc735660aae010c04ef89c732d08eba1b87be6048164f273beaebeca3f30062812b4cd141ddf0291a6ab54f730875d597678a3564c0eed2aac11e5400f951a","ssdeep":"384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM","tlshash":"6b82c7fd3ae6fd13622232b8406f504e6377d893100dc554f615e8f5acb85a8a6a7e3c","size":17672,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-12T19:31:04.201669Z","times_seen":1749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=IB2b0W0qLwWvnyYAJL91No1NRhIWoqoAbiHGGr0ye7KPZwsohYhAfepzbWIpBN29CJ75y_fQK2VvCtGt1Qz1I9Ddv11OPvIQYoUarBnjVE8K4YBr-dD34mDLFmHYv7gHwNiY-uBnyMaHuL6J5gP9APMbKXWBZEOBmNbEEcSuu1M1\u0026t=ffffffff93d1c106","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3d7a123be5203a1a3f0f10233ed373f","sha1":"f4c61f321d8f79a805b356c6ec94090c0d96215c","sha256":"ef9453f74b2617d43dcef4242cf5845101fcfb57289c81bceb20042b0023a192","sha512":"a01bfe8546e59c8af83280a795b3f56dfa23d556b992813a4eb70089e80621686c7b51ee87b3109502667caf1f95cbca074bf607e543a0390bf6f8bb3ecd992b","ssdeep":"384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v","tlshash":"dec2ad5c692551714d3b73bdaba78099fdb9996302008016b9cc6ce42fb0ea453f7fe8","size":26951,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-13T08:29:39.543952Z","times_seen":17567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"82a67235bfc98fe238e3541f2486bc52","sha1":"9f3286dba2512c45c9db60ce23a174be0303cff2","sha256":"ec0a67a3787748f516560c9338b0e03fe3f166007b33edcef680e9d1cf5595b1","sha512":"f67f1659459b66bf32e723dabf77b57153d6594583cbbf61c60d97759f376c24156b67ea1ced3b5a7afb2b2209364a13ea8cc8a727c03a585d9f7503c448f991","ssdeep":"","tlshash":"b380045c1dd3c17503d1d05c4311c0f0f407751515044414d1f4050d3404744c530145","size":37,"data":"","first_seen":"2023-04-10T16:14:53Z","last_seen":"2026-06-13T07:01:30.284517Z","times_seen":16856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=yGp7NTW_buH-UBcrkW3QWZsPZpSAanUI8wPqz3J5kjX2bmz2FUsMUDW45ttB_U1u-P0cFV5UtvBuiPwvoIH4MnCPpBlVdYL-DI9ho7_cCA4hmhqArWZ9d7j3JNqIiNIsEx5UPfpkSUJMatLUFfIkqeL1OqgcINTFmVJFF1J9x9u3_WFJc5swDntjzYHbDZT90\u0026t=5c0e0825","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89eaa5b28df1e17376be71d71649173","sha1":"2b34df4c66bb57de5a24a2ef0896271dfca4f4cd","sha256":"66b804e7a96a87c11e1dd74ea04ac2285df5ad9043f48046c3e5000114d39b1c","sha512":"b73d56304986cd587da17bebf21341b450d41861824102cc53885d863b118f6fdf2456b20791b9a7ae56df91403f342550af9e46f7401429fba1d4a15a6bd3c0","ssdeep":"1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE","tlshash":"54a3094dba42353782eeb4b9013f01437e7b1492a88894aaf544dcc9aebcd85513bf7d","size":102801,"data":"","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-06-13T16:56:40.53084Z","times_seen":9740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"095c91ab666f97468c04585258838903","sha1":"99c22b612ff9ce226dc6e82ac90751981df35eaa","sha256":"35eaf40d86a92ef184838dd80e89020436f56833bd0505b98341fe17bf1622c7","sha512":"12e9b5021993444b983f7da32c84d81896a543cb8967e2f08b32472017b5eac941bdc5ea8230f6352716544919d497577cb7f2f77a66f4a192075948ba2a48dc","ssdeep":"96:dO9r9JoYu065t8oRKz6y+KLgOwimaiJFMEtvRE9Pnlr9h/TbVC3wIhI0rwImdrw/:w9y0a8oRjy+0gOwimaiJuEtvRERlr9hu","tlshash":"db91836f6ef219279467339d501f753c3fae41832906cd00ba8cb6842f8557162baaad","size":4548,"data":"","first_seen":"2026-03-17T15:32:47.68659Z","last_seen":"2026-03-24T16:30:55.620827Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-1.cdn.office.net/files/odsp-web-prod_2026-03-06.006/spoguestaccesswebpack/spoguestaccess.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"435ac1cfcda0cb84e6dd795761ac48c3","sha1":"67e2d6621b0ad46be257a531e7749e7aa311638d","sha256":"b6f84f8c8548c563fa0d78b92cea586bf15547f952ddc8f4f1b7f5dc2a1b6203","sha512":"2652ed51e9fb8fab0934d2411ab45f0575502a2fd7e0b962d996c1e82d2fc99d51b16f727c59ceae3e528a6ed25bbadaa9b21c629a3b125799443482b20a372a","ssdeep":"768:8aNIWS5S3DckH0PGdC8J0C3st3uwt4gMoyc8R2kN:rNIVEDckHPE8J0CutlM/N","tlshash":"a9134d95a61a312e931654f5f03f0403f3797469f808cca5e1eae9e835bcec90167f2a","size":43183,"data":"","first_seen":"2026-02-05T13:05:15.767271Z","last_seen":"2026-04-28T17:12:14.022626Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7a509065e12164be02612a8fe4b7ebe","sha1":"6d113a9c55a785a12378a623a3dc64bc621e61b8","sha256":"f876e65014cba164c12d5667442f210bfbb8c147261354bd3c6eeb1357099cc8","sha512":"23ff1ea7c70691fc4308737bdb30b69a772eb1e751e0071fa7b97ae9300f99cc73cc0bd45d619023b9d16e4efb85a10310b64f77bbc68edfe56e4201c9ab520e","ssdeep":"","tlshash":"58c08cd112082020ed134aaad2fe0080dcf5e8703d60f1ad932fc235608022beb370ec","size":165,"data":"","first_seen":"2026-03-24T01:03:00.554262Z","last_seen":"2026-03-24T01:03:00.554262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"res-1.cdn.office.net/files/odsp-web-prod_2026-03-06.006/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:39.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.cdn.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:BB:34:73:A7:D8:0F:E9:7B:74:0B:A4:58:D5:87:25:63:F2:E2:8E","sha256":"A8:32:48:C1:C1:B3:C7:55:60:42:DC:F0:58:EA:B5:46:76:C5:C5:56:4B:42:9C:06:00:F4:E9:36:69:D7:59:1D"}}},"request":{"raw":"GET /files/odsp-web-prod_2026-03-06.006/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js HTTP/1.1\r\nHost: res-1.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mydrive.effem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 215\r\nx-ms-request-id: a285f4cd-501e-0001-4a29-bba04b000000\r\ndate: Tue, 24 Mar 2026 01:02:39 GMT\r\nakamai-request-bc: [a=184.51.89.154,b=1352266701,c=g,n=SE_M_BROMMA,o=20940],[c=c,n=SE_M_BROMMA,o=20940],[a=132,c=o]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=BROMMA\u0026ASN=20940\u0026Country=SE\u0026Region=M\u0026RequestIdentifier=0.9a5933b8.1774314159.5099f3cd\u0026TotalRTCDNTime=21\u0026CompressionType=\u0026FileSize=215\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=21, clienttt; dur=119, origin; dur=109 , cdntime; dur=10\r\nakamai-cache-status: Miss from child, Miss from parent\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/javascript","magic":"XML 1.0 document, ASCII text","md5":"5ca4aca219497ea4c76e6315b9efd7af","sha1":"fc8b5f1fe2967ab9283b91250a2df0aa33eaa166","sha256":"900cf8c2241422c3e5dddb9ae4d359613890a686f630a9cb0c17bace70b45b09","sha512":"c440289d67b9cd13d182515074568ed8680509959b02b8a91877ca061399050a9898b75d159eeb22f58c07030ff6aa9b44170bf9c37cd71c72dc88898f869221","ssdeep":"","tlshash":"32d0220063866c17c360042fff2cfb64eb0033731ae08378ac8589d307c80e10d9a729","first_seen":"2026-03-24T01:03:00.530294Z","last_seen":"2026-03-24T01:03:00.530294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/_layouts/15/images/favicon.ico?rev=50","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:39.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /_layouts/15/images/favicon.ico?rev=50 HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000\r\ncontent-length: 9096\r\ncontent-type: image/x-icon\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 19 Mar 2026 04:45:03 GMT\r\naccept-ranges: bytes\r\netag: \"80717e265bb7dc1:0\"\r\nvary: Accept-Encoding\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,0,89,1534,59176,59176,89836\r\nsprequestduration: 4\r\nspiislatency: 1\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 0D360533985A4EDEAC4F821FC10C165B Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:39Z\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17542,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e202654ea58a919f5e81cd2b20d35ab7","sha1":"bbe3a8dd0f3dd190c6ba35170287f940909763f2","sha256":"30a1e575887b8e2c11c4fe97e066107740d2eb65daace6791d96fe3e259e750e","sha512":"ea02761a683fa30264fcd8acafbfd639b6da4c44ddd6d5dc7cb2a1f8f4bbbaff040abe9067cc15ae73b7d26ae77dcf9170462227d9d2416f0e69f112a0fdc153","ssdeep":"384:gn8CrIgBsEP0gA9EaH95SNVJNOAuYMezH:7OIUOgNxVbJuszH","tlshash":"c6729da2a18024d3d1212b70e103eafb43a93ceb7a7769a77841fe479c37464699d744","first_seen":"2025-11-19T07:34:36.658649Z","last_seen":"2026-06-12T19:31:04.200636Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res-1.cdn.office.net/files/odsp-web-prod_2026-03-06.006/spoguestaccesswebpack/spoguestaccess.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.cdn.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:BB:34:73:A7:D8:0F:E9:7B:74:0B:A4:58:D5:87:25:63:F2:E2:8E","sha256":"A8:32:48:C1:C1:B3:C7:55:60:42:DC:F0:58:EA:B5:46:76:C5:C5:56:4B:42:9C:06:00:F4:E9:36:69:D7:59:1D"}}},"request":{"raw":"GET /files/odsp-web-prod_2026-03-06.006/spoguestaccesswebpack/spoguestaccess.js HTTP/1.1\r\nHost: res-1.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mydrive.effem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14006\r\nlast-modified: Fri, 13 Mar 2026 19:55:46 GMT\r\nx-ms-request-id: c2f04c5d-e01e-0004-683d-b37290000000\r\nx-ms-meta-sourcebuild: odsp-web-prod_2026-03-06.006\r\nx-ms-meta-sourceversion: 099f2bc661ec5669d98cbbdf5e4ec3edcbfaa039\r\nx-ms-meta-sourceid: 77F2014E1A1AF9610B7E1FE21BBCCD498656F9E8F9112191A34F7BA892C07BA800\r\ncontent-encoding: br\r\ncache-control: public, max-age=630720000\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=184.51.89.154,b=1352266216,c=g,n=SE_M_BROMMA,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=BROMMA\u0026ASN=20940\u0026Country=SE\u0026Region=M\u0026RequestIdentifier=0.9a5933b8.1774314158.5099f1e8\u0026TotalRTCDNTime=21\u0026CompressionType=br\u0026FileSize=14006\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=21, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"435ac1cfcda0cb84e6dd795761ac48c3","sha1":"67e2d6621b0ad46be257a531e7749e7aa311638d","sha256":"b6f84f8c8548c563fa0d78b92cea586bf15547f952ddc8f4f1b7f5dc2a1b6203","sha512":"2652ed51e9fb8fab0934d2411ab45f0575502a2fd7e0b962d996c1e82d2fc99d51b16f727c59ceae3e528a6ed25bbadaa9b21c629a3b125799443482b20a372a","ssdeep":"768:8aNIWS5S3DckH0PGdC8J0C3st3uwt4gMoyc8R2kN:rNIVEDckHPE8J0CutlM/N","tlshash":"a9134d95a61a312e931654f5f03f0403f3797469f808cca5e1eae9e835bcec90167f2a","first_seen":"2026-02-05T13:05:15.767271Z","last_seen":"2026-04-28T17:12:14.022626Z","times_seen":411,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":105,"dns":46,"connect":21,"send":0,"wait":25,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-1.cdn.office.net/bld/_layouts/15/16.0.27104.12006/require.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.cdn.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:BB:34:73:A7:D8:0F:E9:7B:74:0B:A4:58:D5:87:25:63:F2:E2:8E","sha256":"A8:32:48:C1:C1:B3:C7:55:60:42:DC:F0:58:EA:B5:46:76:C5:C5:56:4B:42:9C:06:00:F4:E9:36:69:D7:59:1D"}}},"request":{"raw":"GET /bld/_layouts/15/16.0.27104.12006/require.js HTTP/1.1\r\nHost: res-1.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 6643\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 19 Mar 2026 11:23:01 GMT\r\nx-ms-request-id: 8d48c2ae-401e-0022-7db3-b73a88000000\r\ncache-control: max-age=630720000\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nvary: Accept-Encoding\r\nakamai-request-bc: [a=184.51.89.154,b=1352266168,c=g,n=SE_M_BROMMA,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=BROMMA\u0026ASN=20940\u0026Country=SE\u0026Region=M\u0026RequestIdentifier=0.9a5933b8.1774314158.5099f1b8\u0026TotalRTCDNTime=8\u0026CompressionType=gzip\u0026FileSize=6643\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17444)","md5":"6efddf589864d2e146a55c01c6764a35","sha1":"efa8bba46cb97877eec5430c43f0ac32585b6b2f","sha256":"2d92f0ce8491d2f9a27ea16d261a15089c4a9be879d1eedcb6f4a3859e7f1999","sha512":"1afc735660aae010c04ef89c732d08eba1b87be6048164f273beaebeca3f30062812b4cd141ddf0291a6ab54f730875d597678a3564c0eed2aac11e5400f951a","ssdeep":"384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM","tlshash":"6b82c7fd3ae6fd13622232b8406f504e6377d893100dc554f615e8f5acb85a8a6a7e3c","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-12T19:31:04.201669Z","times_seen":1749,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":70,"dns":45,"connect":8,"send":0,"wait":13,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-1.cdn.office.net/files/odsp-web-prod_2026-03-06.006/spoguestaccesswebpack/spoguestaccess.js","fqdn":"res-1.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"184.51.252.154","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.cdn.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C9:BB:34:73:A7:D8:0F:E9:7B:74:0B:A4:58:D5:87:25:63:F2:E2:8E","sha256":"A8:32:48:C1:C1:B3:C7:55:60:42:DC:F0:58:EA:B5:46:76:C5:C5:56:4B:42:9C:06:00:F4:E9:36:69:D7:59:1D"}}},"request":{"raw":"GET /files/odsp-web-prod_2026-03-06.006/spoguestaccesswebpack/spoguestaccess.js HTTP/1.1\r\nHost: res-1.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mydrive.effem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14006\r\nlast-modified: Fri, 13 Mar 2026 19:55:46 GMT\r\nx-ms-request-id: c2f04c5d-e01e-0004-683d-b37290000000\r\nx-ms-meta-sourcebuild: odsp-web-prod_2026-03-06.006\r\nx-ms-meta-sourceversion: 099f2bc661ec5669d98cbbdf5e4ec3edcbfaa039\r\nx-ms-meta-sourceid: 77F2014E1A1AF9610B7E1FE21BBCCD498656F9E8F9112191A34F7BA892C07BA800\r\ncontent-encoding: br\r\ncache-control: public, max-age=630720000\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nakamai-request-bc: [a=184.51.89.154,b=1352266221,c=g,n=SE_M_BROMMA,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=BROMMA\u0026ASN=20940\u0026Country=SE\u0026Region=M\u0026RequestIdentifier=0.9a5933b8.1774314158.5099f1ed\u0026TotalRTCDNTime=21\u0026CompressionType=br\u0026FileSize=14006\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=21, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"435ac1cfcda0cb84e6dd795761ac48c3","sha1":"67e2d6621b0ad46be257a531e7749e7aa311638d","sha256":"b6f84f8c8548c563fa0d78b92cea586bf15547f952ddc8f4f1b7f5dc2a1b6203","sha512":"2652ed51e9fb8fab0934d2411ab45f0575502a2fd7e0b962d996c1e82d2fc99d51b16f727c59ceae3e528a6ed25bbadaa9b21c629a3b125799443482b20a372a","ssdeep":"768:8aNIWS5S3DckH0PGdC8J0C3st3uwt4gMoyc8R2kN:rNIVEDckHPE8J0CutlM/N","tlshash":"a9134d95a61a312e931654f5f03f0403f3797469f808cca5e1eae9e835bcec90167f2a","first_seen":"2026-02-05T13:05:15.767271Z","last_seen":"2026-04-28T17:12:14.022626Z","times_seen":411,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":78,"dns":12,"connect":24,"send":0,"wait":24,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:02:37.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private\r\ncontent-length: 31148\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,0,0,0,0,0,0,0\r\nx-sharepointhealthscore: 0\r\nx-aspnet-version: 4.0.30319\r\nisocdi: 0\r\nx-databoundary: NONE\r\nx-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/\r\nx-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/\r\nsprequestguid: a4f802a2-f0f7-c000-3669-91d2707f9269\r\nrequest-id: a4f802a2-f0f7-c000-3669-91d2707f9269\r\nms-cv: ogL4pPfwAMA2aZHScH+SaQ.0\r\nsplogid: a4f802a2-f0f7-c000-3669-91d2707f9269\r\nalt-svc: h3=\":443\";ma=86400\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://spo.nel.measure.office.net/api/report?tenantId=2fc13e34-f03f-498b-982a-7cb446e25bc6\u0026destinationEndpoint=Edge-Prod-SVG20r5a\u0026frontEnd=AFD\u0026RemoteIP=91.90.42.0\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":7200,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com teams.cloud.microsoft *.office365.com goals.cloud.microsoft *.powerapps.com *.powerbi.com *.yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com m365.cloud.microsoft *.cloud.microsoft *.stream.azure-test.net *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;\r\nsprequestduration: 468\r\nspiislatency: 4\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 8A1E6D2FD1564F538DF0E5336C4FD13C Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:37Z\r\ndate: Tue, 24 Mar 2026 01:02:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70040,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30522), with CRLF, LF line terminators","md5":"20c64503bb70aea8078e8c1d3066e63b","sha1":"4f28b0f204b69e8bc78eee7265e2ee620ce5bc24","sha256":"a134f6ccd00ec83656ae522d53277adb6ed4ccb0428b895342ecfe7a7dbfc138","sha512":"e80c92d55955188c92d27c6ac1421124ec7bd8bb43bcea3f21a52ad14303db2eaaf847cb03a060de651233a536a7500cc4a50934ff64c1686e927149b5b950d1","ssdeep":"1536:PBggud/4NZaWXBOxSPSW8N6fGNNKEz09KvJs2wVXGzH3x:PHuUCGeTKE2VXGN","tlshash":"de6339ab3a61b453926322b5907fa10ab13fc1731608c010f69ce4f6aff99549677f6c","first_seen":"2026-03-24T01:03:00.533587Z","last_seen":"2026-03-24T01:03:00.533587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":318,"dns":289,"connect":8,"send":0,"wait":843,"receive":89,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/WebResource.axd?d=Rkg8vqW01pJgqlTzzY7WRUH8A4NecWtyqCOxbjHCtKTZd12BqD6FBZqQr_SgOPhvdiU1pIOOWR-yErziKRNEtog2qRLCqrKOkDISewy3tiI1\u0026t=639081453183982065","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /WebResource.axd?d=Rkg8vqW01pJgqlTzzY7WRUH8A4NecWtyqCOxbjHCtKTZd12BqD6FBZqQr_SgOPhvdiU1pIOOWR-yErziKRNEtog2qRLCqrKOkDISewy3tiI1\u0026t=639081453183982065 HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 6007\r\ncontent-type: application/x-javascript\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Mar 2027 00:38:29 GMT\r\nlast-modified: Tue, 03 Mar 2026 22:35:18 GMT\r\nvary: Accept-Encoding\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,51,146,3047193,1343834,1343834,49176\r\nx-aspnet-version: 4.0.30319\r\nsprequestduration: 3\r\nspiislatency: 0\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 9FDFF91C1C8D45368A1D9BCD866B2C13 Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:38Z\r\ndate: Tue, 24 Mar 2026 01:02:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"90ea7274f19755002360945d54c2a0d7","sha1":"647b5d8bf7d119a2c97895363a07a0c6eb8cd284","sha256":"40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db","sha512":"7474667800ff52a0031029cc338f81e1586f237eb07a49183008c8ec44a8f67b37e5e896573f089a50283df96a1c8f185e53d667741331b647894532669e2c07","ssdeep":"384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG","tlshash":"2ea2204c350622348a7bbb7ed76bc39cfd7a907729049071b85c99991fb0e6012e5fe8","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-13T17:42:40.961808Z","times_seen":37618,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=IB2b0W0qLwWvnyYAJL91No1NRhIWoqoAbiHGGr0ye7KPZwsohYhAfepzbWIpBN29CJ75y_fQK2VvCtGt1Qz1I9Ddv11OPvIQYoUarBnjVE8K4YBr-dD34mDLFmHYv7gHwNiY-uBnyMaHuL6J5gP9APMbKXWBZEOBmNbEEcSuu1M1\u0026t=ffffffff93d1c106","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /ScriptResource.axd?d=IB2b0W0qLwWvnyYAJL91No1NRhIWoqoAbiHGGr0ye7KPZwsohYhAfepzbWIpBN29CJ75y_fQK2VvCtGt1Qz1I9Ddv11OPvIQYoUarBnjVE8K4YBr-dD34mDLFmHYv7gHwNiY-uBnyMaHuL6J5gP9APMbKXWBZEOBmNbEEcSuu1M1\u0026t=ffffffff93d1c106 HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 5479\r\ncontent-type: application/x-javascript\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Mar 2027 01:02:38 GMT\r\nlast-modified: Tue, 24 Mar 2026 01:02:38 GMT\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,0,0,193,26345,26345,89509\r\nx-aspnet-version: 4.0.30319\r\nsprequestduration: 6\r\nspiislatency: 0\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 0A1E1762CED74F5EB1926E8FADEAFA06 Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:38Z\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]}],"data":{"size":26954,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"b3d7a123be5203a1a3f0f10233ed373f","sha1":"f4c61f321d8f79a805b356c6ec94090c0d96215c","sha256":"ef9453f74b2617d43dcef4242cf5845101fcfb57289c81bceb20042b0023a192","sha512":"a01bfe8546e59c8af83280a795b3f56dfa23d556b992813a4eb70089e80621686c7b51ee87b3109502667caf1f95cbca074bf607e543a0390bf6f8bb3ecd992b","ssdeep":"384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v","tlshash":"dec2ad5c692551714d3b73bdaba78099fdb9996302008016b9cc6ce42fb0ea453f7fe8","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-06-13T08:29:39.543952Z","times_seen":17567,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=yGp7NTW_buH-UBcrkW3QWZsPZpSAanUI8wPqz3J5kjX2bmz2FUsMUDW45ttB_U1u-P0cFV5UtvBuiPwvoIH4MnCPpBlVdYL-DI9ho7_cCA4hmhqArWZ9d7j3JNqIiNIsEx5UPfpkSUJMatLUFfIkqeL1OqgcINTFmVJFF1J9x9u3_WFJc5swDntjzYHbDZT90\u0026t=5c0e0825","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /ScriptResource.axd?d=yGp7NTW_buH-UBcrkW3QWZsPZpSAanUI8wPqz3J5kjX2bmz2FUsMUDW45ttB_U1u-P0cFV5UtvBuiPwvoIH4MnCPpBlVdYL-DI9ho7_cCA4hmhqArWZ9d7j3JNqIiNIsEx5UPfpkSUJMatLUFfIkqeL1OqgcINTFmVJFF1J9x9u3_WFJc5swDntjzYHbDZT90\u0026t=5c0e0825 HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 25609\r\ncontent-type: application/x-javascript\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Mar 2027 01:02:38 GMT\r\nlast-modified: Tue, 24 Mar 2026 01:02:38 GMT\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,0,0,194,26345,26345,89344\r\nx-aspnet-version: 4.0.30319\r\nsprequestduration: 21\r\nspiislatency: 0\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 9BC5267F2BFA4330B649C0C48A96B494 Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:38Z\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]}],"data":{"size":102804,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65329), with CRLF line terminators","md5":"c89eaa5b28df1e17376be71d71649173","sha1":"2b34df4c66bb57de5a24a2ef0896271dfca4f4cd","sha256":"66b804e7a96a87c11e1dd74ea04ac2285df5ad9043f48046c3e5000114d39b1c","sha512":"b73d56304986cd587da17bebf21341b450d41861824102cc53885d863b118f6fdf2456b20791b9a7ae56df91403f342550af9e46f7401429fba1d4a15a6bd3c0","ssdeep":"1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE","tlshash":"54a3094dba42353782eeb4b9013f01437e7b1492a88894aaf544dcc9aebcd85513bf7d","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-06-13T16:56:40.53084Z","times_seen":9740,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/ScriptResource.axd?d=ZuEb2wkLGRjfj1xLGpSyHsxC316xu5TCCh5j--ED_UiGRDwktqUUqGlECySy5BR2BH4eTao92hF8bWC1YMe0FdPzJ_IxRyoKjW3L6HLzmZPaOyzVT5fuSwY8VhwFM3eb2sQWnbe0AbdwBTDyXq3T7UHt6vrsVY7Ptqbw090XgGuBnejUm6KVs2798wmIvNQM0\u0026t=5c0e0825","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /ScriptResource.axd?d=ZuEb2wkLGRjfj1xLGpSyHsxC316xu5TCCh5j--ED_UiGRDwktqUUqGlECySy5BR2BH4eTao92hF8bWC1YMe0FdPzJ_IxRyoKjW3L6HLzmZPaOyzVT5fuSwY8VhwFM3eb2sQWnbe0AbdwBTDyXq3T7UHt6vrsVY7Ptqbw090XgGuBnejUm6KVs2798wmIvNQM0\u0026t=5c0e0825 HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\ncontent-length: 9984\r\ncontent-type: application/x-javascript\r\ncontent-encoding: gzip\r\nexpires: Tue, 23 Mar 2027 20:57:17 GMT\r\nlast-modified: Mon, 23 Mar 2026 20:57:17 GMT\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,427,211,1542179,2102272,2102272,34765\r\nx-aspnet-version: 4.0.30319\r\nsprequestduration: 4\r\nspiislatency: 0\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 3377DBA4D037461283F1D8868E784638 Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:38Z\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":40329,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39257), with CRLF line terminators","md5":"da9dc1c32e89c02fc1e9eeb7e5aab91e","sha1":"3efb110efa6068ce6b586a67f87da5125310bc30","sha256":"398cdf1b27ef247e5bc77805f266bb441e60355463fc3d1776f41aae58b08cf1","sha512":"d4730ebc4ca62624b8300e292f27fd79d42a9277e409545df7dc916189ed9df13e46faa37e3924b85a7c7ea8c76bf65a05eca69b4029b550430536ec6df8552a","ssdeep":"384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE","tlshash":"a203eac9bb759135c1ddb52a513b86877b2ab023250480bf7910bede0a7cac3552eb39","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-06-13T16:56:40.531426Z","times_seen":9564,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydrive.effem.com/_layouts/15/images/microsoft-logo.png","fqdn":"mydrive.effem.com","domain":"effem.com","tld":"com"},"ip":{"addr":"13.107.137.10","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU","date":"2026-03-24T01:02:38.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team.effem.com","organization":"Mars inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CF:E9:74:95:DA:1B:69:3D:A4:23:86:D3:6F:CD:C8:DF:D9:26:70:21","sha256":"54:DB:C0:AB:FF:11:62:2B:7D:D1:6B:67:41:6C:21:9F:ED:7C:9C:17:EE:E8:30:B7:22:7E:3B:2B:E8:E5:3E:F7"}}},"request":{"raw":"GET /_layouts/15/images/microsoft-logo.png HTTP/1.1\r\nHost: mydrive.effem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mydrive.effem.com/:w:/g/personal/tillie_smith_effem_com/IQBqVcqBmO4qT7hOcmPzNF3EARGnJ0xl9Y5FVi4RbrjjabU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000\r\ncontent-length: 3331\r\ncontent-type: image/png\r\nlast-modified: Thu, 19 Mar 2026 04:45:03 GMT\r\naccept-ranges: bytes\r\netag: \"6eb5d9265bb7dc1:0\"\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,4194720,0,0,182,26345,26345,89056\r\nsprequestduration: 5\r\nspiislatency: 1\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27104\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: A3E3DC4BBAA24E678E7DF9FE5C758779 Ref B: SVG20EDGE0207 Ref C: 2026-03-24T01:02:38Z\r\ndate: Tue, 24 Mar 2026 01:02:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27104","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]}],"data":{"size":3331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef884bdedef280df97a4c5604058d8db","sha1":"6f04244b51ad2409659e267d308b97e09ce9062b","sha256":"825de044d5ac6442a094ff95099f9f67e9249a8110a2fbd57128285776632adb","sha512":"a083381c53070b65b3b8a7a7293d5d2674d2f6ec69c0e19748823d3fdd6f527e8d3d31d311ccef8e26fc531770f101cdaf95f23ecc990db405b5ef48b0c91ba2","ssdeep":"","tlshash":"70613eb7b067ba03fd0feb1724b8bff5367e50502249898da01206c9da26f29b935740","first_seen":"2023-05-05T11:19:20Z","last_seen":"2026-06-12T19:31:04.197075Z","times_seen":1827,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"mydrive.effem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}