{"report_id":"eedf0d76-fca6-450d-8345-eba74cb73925","version":0,"status":"done","tags":[],"date":"2026-06-10T13:02:13Z","url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/i/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"title":"Teams","dom":{"size":113599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62420)","md5":"bdb551f9399837e6141f867a903b1cac","sha1":"a263cb8d856f2d0505e0983f616e5547a2cdc7fe","sha256":"d8e065222c42cafd510d381cc8c047d649bde5aa55341d04ee62b55f030d956b","sha512":"0ad6ab3259e539dfa615524217f869573bde14e52393858b74101b1b42093bc7ed18bc80db349b1e431905ce4780fa793ac1adfa9dca89236767e38547939346","ssdeep":"1536:kzkuhw+ExiazA/PWrF7qvEAFiQcpmaB9sG6yVUnFOH:kzEBgyVUFS","tlshash":"6cb3d89069243c26d037873561d1bd4762215503e637aebbf62e2db9cf896cb0f32e49","dom_hash":"domhashcae0bc079f3219b1bb0be9f99e0f3ee7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/i/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T13:02:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2026-06-08T17:36:19.150138Z","alert_count":0,"request_count":3,"received_data":58316,"sent_data":2106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":2,"received_data":81882,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rnicrosoft-support.human-resources.services","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-10-05","domain_rank":0,"first_seen":"2026-06-10T13:02:19.520302Z","last_seen":"2026-06-10T13:02:20.090228Z","alert_count":16,"request_count":16,"received_data":1376035,"sent_data":8383,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-06-07T22:55:02.768854Z","alert_count":0,"request_count":5,"received_data":2774258,"sent_data":2702,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jquery/jquery.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-21T07:57:03.417724Z","times_seen":20017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-06-20T12:31:05.400424Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"95fa9397daa8fade9656c2ee352dfbe8","sha1":"c58210a4a83dc364209b404b574bfb542c0c8baf","sha256":"87e4d1f531eac8b2bc95232cc3e9ff57fb0656ec4be18aa34a4f98b8b0c65e7c","sha512":"cc99c99e8be431f6d332b0bc61a039f375c32ab5128d1896c05017c1a615668de1f44eb967126da1d990ac1903d3ee749e8c87ee50d495dc2855535e607410f5","ssdeep":"768:9dcHJ7xlluInfnN5KMFgNrH6KYdsLc806u3InJDw2MfA7kUIAi:qtxl48nN5KdFH6L133iJ02pgUI","tlshash":"b9f29e0dec0b24bbddee8bd22fa067c8657c82594aae051d35ff04c355a9ad7364a4cc","size":36171,"data":"","first_seen":"2026-06-10T13:02:23.004294Z","last_seen":"2026-06-10T13:02:23.004294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"fab675ddb7f2fc590dc2d9be5e1189f4","sha1":"0bbb8c8fab108098cde6aea904bcb3665db268ac","sha256":"b16cedd92a0f432ab0d54490abf5dd868cd67324f81053c4e57a493e4dcbb919","sha512":"d23fae6eb5e93b118c574d6e4f15f84dfec1a26acd2dc806631c681af1a7ed3409da58e9943ccd0ad9ff5c143707b428de2aad6b9a46b5b9be2355c59bd3ce6c","ssdeep":"","tlshash":"96b012770610c8580c000952c42fd7a8f4429028ea5098f240348fe805545e38132400","size":102,"data":"","first_seen":"2026-06-04T01:37:09.193783Z","last_seen":"2026-06-21T02:43:01.307421Z","times_seen":9386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255089,"data":"","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-06-21T07:25:41.183336Z","times_seen":2002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b0c0b0dc19f3058d1c2f55bae40bb45","sha1":"d27f5e86c903a1d7bf6d723f48c2af8b6d89d2f5","sha256":"38b07d1dd6bae0bd8eaeaec9ca4a976c1f8842bd002b8227e49d1cb2b15076fb","sha512":"ac9e3d9cec9509090a6a65c1707c306feed099dc23acb5bf6337650b866b517fb28003cbb7260d8ed19682f7098de9c08bdb954cb3bc6cb685d06aebebf7b7d5","ssdeep":"","tlshash":"1b113eb31a05a0340f320de1a2ffca71e892b01cf01888d8e919cec42e69dcbce10981","size":1006,"data":"","first_seen":"2026-06-05T14:08:03.492739Z","last_seen":"2026-06-10T13:48:18.174338Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","size":894957,"data":"","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","size":894957,"data":"","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/js/userInteraction.js","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","size":2276,"data":"","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-06-20T12:31:05.379977Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-06-20T12:31:05.400424Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"95fa9397daa8fade9656c2ee352dfbe8","sha1":"c58210a4a83dc364209b404b574bfb542c0c8baf","sha256":"87e4d1f531eac8b2bc95232cc3e9ff57fb0656ec4be18aa34a4f98b8b0c65e7c","sha512":"cc99c99e8be431f6d332b0bc61a039f375c32ab5128d1896c05017c1a615668de1f44eb967126da1d990ac1903d3ee749e8c87ee50d495dc2855535e607410f5","ssdeep":"768:9dcHJ7xlluInfnN5KMFgNrH6KYdsLc806u3InJDw2MfA7kUIAi:qtxl48nN5KdFH6L133iJ02pgUI","tlshash":"b9f29e0dec0b24bbddee8bd22fa067c8657c82594aae051d35ff04c355a9ad7364a4cc","size":36171,"data":"","first_seen":"2026-06-10T13:02:23.004294Z","last_seen":"2026-06-10T13:02:23.004294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","size":894957,"data":"","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-06-20T22:39:03.91991Z","times_seen":2273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/js/recaptcha.js","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","size":2125,"data":"","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-06-20T12:31:05.356725Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:51.010Z","timestamp":1781096511010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:28 GMT","end":"Mon, 10 Aug 2026 18:35:27 GMT"},"fingerprint":{"sha1":"D3:3B:84:F8:CB:5F:5F:BC:77:51:FA:C6:04:3C:32:04:FC:6B:41:44","sha256":"9A:D2:3D:6F:B4:33:16:5E:F6:C6:EF:DC:D5:D5:91:5F:A1:CD:62:3E:A0:98:79:E0:06:C1:29:27:A0:C4:B8:46"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 10 Jun 2026 13:01:51 GMT\r\ndate: Wed, 10 Jun 2026 13:01:51 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":952,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fab675ddb7f2fc590dc2d9be5e1189f4","sha1":"0bbb8c8fab108098cde6aea904bcb3665db268ac","sha256":"b16cedd92a0f432ab0d54490abf5dd868cd67324f81053c4e57a493e4dcbb919","sha512":"d23fae6eb5e93b118c574d6e4f15f84dfec1a26acd2dc806631c681af1a7ed3409da58e9943ccd0ad9ff5c143707b428de2aad6b9a46b5b9be2355c59bd3ce6c","ssdeep":"","tlshash":"96b012770610c8580c000952c42fd7a8f4429028ea5098f240348fe805545e38132400","first_seen":"2026-06-04T01:37:09.193783Z","last_seen":"2026-06-21T02:43:01.307421Z","times_seen":9386,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:50.859Z","timestamp":1781096510859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 02:17:06 GMT\r\nexpires: Fri, 04 Jun 2027 02:17:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 557084\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-21T09:30:17.828981Z","times_seen":890735,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":20,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rnicrosoft-support.human-resources.services/i/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T13:01:46.040Z","timestamp":1781096506040,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/a67010b9a3b8c49f89eca04a28761a129 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T09:29:47.964579Z","times_seen":16605039,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/i/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T13:01:48.545Z","timestamp":1781096508545,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/a67010b9a3b8c49f89eca04a28761a129 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 348\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 10 Jun 2026 13:01:48 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T09:29:47.964579Z","times_seen":16605039,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/bootstrap/css/bootstrap.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.536Z","timestamp":1781096509536,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 23025\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173441,"size_decoded":24307,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"cb7bd9e2b45319f4e7c2e613b8f6c0e8","sha1":"6175c12bf84a28c6a281ab923752481b6fe58056","sha256":"2797160125a75dddc44d8cbee398bad6770dbfe2f57479ca65c3f4142e1a9df0","sha512":"dcdc72d350803257cfe7729215a4b3ac99ad9c6cdd04d466b570eea3cde3f5225d82ffba496ee7f171dc65650314fa95f2a4132840ec74c9cf060027295fc9fa","ssdeep":"768:yER2n1QySUVLqqkXZTMegYFomDquiMRNTHU44DMIMETn5VBKCkcuZGB2Vcx/cXiC:Wn1QyiLZGB2VKcXihoiL3yFITMK4fWS","tlshash":"0504769de60131c22633d768bba38d42ff062263c606c97abfed62544fb94545631f8e","first_seen":"2023-10-13T13:05:14Z","last_seen":"2026-06-20T12:31:05.302877Z","times_seen":387,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jqueryui/jquery-ui.structure.min.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.541Z","timestamp":1781096509541,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 4962\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15552,"size_decoded":6243,"mime_type":"text/css","magic":"ASCII text, with very long lines (15418), with CRLF line terminators","md5":"909ce025471e11a770dfeb266d02384a","sha1":"b915957fc131db3ec221e130af9b2023d039d458","sha256":"4e2ec0490ffa766a812249114b99f7b2b578c750619f3175d948be265f07af11","sha512":"82888f071c8f992d6e33f2bf3e7e8a19bd1cedd4d7f9923151d02947cac846e61b061dbe855706d12ead3dac762e16d4429ff675c5192c9af86239acd58fe77d","ssdeep":"192:Ly4ncR8lOG1bRCNPbtqxlhIuxrjv572hk/k52bZuQEjQDMsrsUR9P:L1cR8lOXHc11evs","tlshash":"c6629730e6572d3ebc33c25064a19efea319c167ebb291eff146910287ad49146bf858","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.353559Z","times_seen":147,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.570Z","timestamp":1781096509570,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/bootstrap/js/bootstrap.min.js?tn=261214474892 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 10945\r\nContent-Type: application/x-javascript\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":39685,"size_decoded":12243,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-06-20T22:39:03.91991Z","times_seen":2273,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/js/userInteraction.js","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.577Z","timestamp":1781096509577,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/js/userInteraction.js HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1181\r\nContent-Type: application/x-javascript\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2276,"size_decoded":2479,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-06-20T12:31:05.379977Z","times_seen":95,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.956Z","timestamp":1781096509956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://rnicrosoft-support.human-resources.services/\r\nOrigin: http://rnicrosoft-support.human-resources.services\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383127\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 16:24:46 GMT\r\nexpires: Tue, 08 Jun 2027 16:24:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160624\r\nlast-modified: Sun, 31 May 2026 02:02:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":894957,"size_decoded":384034,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (651)","md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":17,"receive":67,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:50.324Z","timestamp":1781096510324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:28 GMT","end":"Mon, 10 Aug 2026 18:35:27 GMT"},"fingerprint":{"sha1":"D3:3B:84:F8:CB:5F:5F:BC:77:51:FA:C6:04:3C:32:04:FC:6B:41:44","sha256":"9A:D2:3D:6F:B4:33:16:5E:F6:C6:EF:DC:D5:D5:91:5F:A1:CD:62:3E:A0:98:79:E0:06:C1:29:27:A0:C4:B8:46"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://rnicrosoft-support.human-resources.services/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 10 Jun 2026 13:01:50 GMT\r\ncontent-security-policy: script-src 'nonce-vjUSIahdtjR5qhJnK72cLg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54632,"size_decoded":29393,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36177)","md5":"2648e325a0260a3eefb1215e74f82603","sha1":"3af8827383e8607eea9642d8f1421566b0a13027","sha256":"fecec38238204fa11729e746c484b86b3b977055c20497ba47d0b02fe50d5df1","sha512":"85221c2aba2b93c8890a58c3f2d04b5d3291b463f53e4ce6c088f8390deec779271d62bf5b34e3e621d46ac6ea37d097e9814bc50bf2b0947a254ac2de57a8eb","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/LSxqdcHJ7xlluInfnN5KMFgNrH6KYdw:y+kwwJtxl48nN5KdFH6L133iJ02pgUp","tlshash":"ce337b0448071045df978ee227c97f74fe1d8210624a80797bfe47a7aedadd7626a38c","first_seen":"2026-06-10T13:02:22.976834Z","last_seen":"2026-06-10T13:02:22.976834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jqueryui/jquery-ui.min.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.538Z","timestamp":1781096509538,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.min.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7882\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32109,"size_decoded":9163,"mime_type":"text/css","magic":"ASCII text, with very long lines (29164), with CRLF line terminators","md5":"4ef4ec09fd03e96ac23fb3cb85c16746","sha1":"a1a208b1ef92c7e604ae53ea283492eeb045d1d7","sha256":"b0b53ea606e7397f37666242cd8d63d17186b3cc8513d49a9852bf4828a1fc46","sha512":"cc021c31550069f904fa63dcde06124cd77c74b61976f68c40756c80835ca51e06f3f7886fab886cef861eb7ff3b22a492cde7ea705206f0aa388967d3d9649d","ssdeep":"384:6CwiEtw1cR8lOXHc11evBMzymUh+4x6GcOzDBSc7nfZBhVi:plEtPXHcEBMznURx6GcOzDfBhA","tlshash":"dee25430a5c2242dfe33c23061e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.306896Z","times_seen":159,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.583Z","timestamp":1781096509583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:28 GMT","end":"Mon, 10 Aug 2026 18:35:27 GMT"},"fingerprint":{"sha1":"D3:3B:84:F8:CB:5F:5F:BC:77:51:FA:C6:04:3C:32:04:FC:6B:41:44","sha256":"9A:D2:3D:6F:B4:33:16:5E:F6:C6:EF:DC:D5:D5:91:5F:A1:CD:62:3E:A0:98:79:E0:06:C1:29:27:A0:C4:B8:46"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://rnicrosoft-support.human-resources.services/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 10 Jun 2026 13:01:49 GMT\r\ndate: Wed, 10 Jun 2026 13:01:49 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1006,"size_decoded":1314,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1006), with no line terminators","md5":"2b0c0b0dc19f3058d1c2f55bae40bb45","sha1":"d27f5e86c903a1d7bf6d723f48c2af8b6d89d2f5","sha256":"38b07d1dd6bae0bd8eaeaec9ca4a976c1f8842bd002b8227e49d1cb2b15076fb","sha512":"ac9e3d9cec9509090a6a65c1707c306feed099dc23acb5bf6337650b866b517fb28003cbb7260d8ed19682f7098de9c08bdb954cb3bc6cb685d06aebebf7b7d5","ssdeep":"","tlshash":"1b113eb31a05a0340f320de1a2ffca71e892b01cf01888d8e919cec42e69dcbce10981","first_seen":"2026-06-05T14:08:03.492739Z","last_seen":"2026-06-10T13:48:18.174338Z","times_seen":6,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":39,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/media/a/cmedia_1115c109b085426cacf374f3debf09a4/TN_PHI_L153F_Microsoftlogo.jpg","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.586Z","timestamp":1781096509586,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/a/cmedia_1115c109b085426cacf374f3debf09a4/TN_PHI_L153F_Microsoftlogo.jpg HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 30552\r\nContent-Type: image/jpeg\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=3491\r\nExpires: Wed, 10 Jun 2026 14:00:01 GMT\r\nLast-Modified: Wed, 10 Jun 2026 13:00:01 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30552,"size_decoded":31906,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 212x50, components 3","md5":"d8b752575524f990c4fafc3a19b2b369","sha1":"3c6ac2f97cdc37039dc33b0a8e169e3d7463cff6","sha256":"bc8087c55507c8c775ba8ee7a2a660ca2351d7963f0e0b31e0008b0f036eafbe","sha512":"56ccd47ac22cf1cfa21bf02c0071c71705b009fd4a38f301514585e12009deaf44734e047bcb6dd1b0684d8dd19941b6e7b99a9311935573887fdc23efbb0f5b","ssdeep":"384:8iOW+3Fr4bYdBe3kFGIswQB1pQHFdNeljZs0ma1wQNHCTVbE8lpkpfN9rU9dEj34:8Q+1Bds3x2QxoL0MdEiAf4ujFYt/","tlshash":"c4d29329b49805214077e3b99f6aaa05ff728057930b92007dec6ad25fbad50c373f9d","first_seen":"2023-09-22T23:39:52Z","last_seen":"2026-06-18T02:16:15.720639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jqueryui/jquery-ui.theme.min.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.544Z","timestamp":1781096509544,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2328\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13880,"size_decoded":3609,"mime_type":"text/css","magic":"ASCII text, with very long lines (13746), with CRLF line terminators","md5":"74fb9452a91ef09555eb92aa59516997","sha1":"b74731af5b28a90cca86fa1097c75d8f8419ab87","sha256":"11e1cf2b2ee76191e1556d414a6eebb8e9a357b5930ebbc06858162174b1683d","sha512":"0107fde1e003f418b9da20d5dc38ae6d6397e70c239406343ed995470c934e032c833a4b01fe6e776c699646d64c3d2d376c2a21d9b1180cd4b3d41764b6f318","ssdeep":"192:LwGIzlzymUh+4pQ8l6GcIPRBGWLTxBm9v5B6xBpYPzFhCNBjVs5y6sybYw9QoFYG:L7MzymUh+4x6GcOzDBSc7nfZBhVi","tlshash":"8652e850a4c2212dff13d53161e11ef0513b9281eda61f7c64aafbad62d28f8c4779b2","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.36506Z","times_seen":145,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:50.855Z","timestamp":1781096510855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 02:17:06 GMT\r\nexpires: Fri, 04 Jun 2027 02:17:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 557084\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-21T09:30:17.828981Z","times_seen":890735,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/css/rp_tooltips.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.550Z","timestamp":1781096509550,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/css/rp_tooltips.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2514\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":13532,"size_decoded":3795,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b2f2bce67a3c4ab9b0f17372f010918","sha1":"eb379f291a848680ddd5d3ecb4e59818f9a602e3","sha256":"9bddcf9a5fc7baf7e7bdfe849437591ee53dca4206b1b8af6a705ada50fbadba","sha512":"0c6ddfcdb4ee038c98c1eb9faa6af8df0d55bd5f74704f2ab51b20e6c107b8757be11640fd5753c4a955a64e451fff661357c2c61c769ed9b6209416bf9bcb27","ssdeep":"384:yxiQ952UOM7FEOBO57QNZhgfR6H9CWXkOX:s52UOM7FEOBO57QNZhgfR6H9CWXkOX","tlshash":"6152755ade1220825333d35cebf20754eb653023ca824479faec619ddfb8758aa51fc9","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.382432Z","times_seen":145,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:50.480Z","timestamp":1781096510480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42350\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 17:35:04 GMT\r\nexpires: Tue, 08 Jun 2027 17:35:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156406\r\nlast-modified: Sun, 31 May 2026 02:02:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82857,"size_decoded":43197,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"580f347c31fb9500c0f1c554f1a0a572","sha1":"f8a5058350a3e3715d14876059195995caf257c1","sha256":"d14a23ec7b08c3ed53a510bb605a0f940457943cfececad6190e8f7b5ac30e3f","sha512":"d61a46f850db1c5858c90a8bee69d3cf3dce96b408bdd192a42843dd704c4db2f1da1c12dbff34761cee7a2c5bd843ea8d036851a531f91aa14d732106c40977","ssdeep":"1536:A7Rpgh9C9ToL9gTNfWNfK4Rx7nHZzhXwWxd1bx7:A7ArC9ULiTYNC4Rn9Xt","tlshash":"b6837e7338513a1afc279b616196bdfdf21cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-06-04T01:37:09.137697Z","last_seen":"2026-06-21T02:43:01.318173Z","times_seen":10136,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:50.830Z","timestamp":1781096510830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 02:29:48 GMT\r\nexpires: Thu, 11 Jun 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 556322\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-21T09:30:17.820724Z","times_seen":660371,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.574Z","timestamp":1781096509574,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.min.js?tn=261214474892 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 67989\r\nContent-Type: application/x-javascript\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255089,"size_decoded":69287,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators","md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-06-21T07:25:41.183336Z","times_seen":2002,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":29,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/js/recaptcha.js","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.579Z","timestamp":1781096509579,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/js/recaptcha.js HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1062\r\nContent-Type: application/x-javascript\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2125,"size_decoded":2360,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-06-20T12:31:05.356725Z","times_seen":76,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/webworker.js?hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl","date":"2026-06-10T13:01:51.065Z","timestamp":1781096511065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383127\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 16:24:46 GMT\r\nexpires: Tue, 08 Jun 2027 16:24:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160625\r\nlast-modified: Sun, 31 May 2026 02:02:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":894957,"size_decoded":384014,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (651)","md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T13:01:48.762Z","timestamp":1781096508762,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/i/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 28857\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":112405,"size_decoded":30173,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62261), with CRLF line terminators","md5":"3b53ea26bdc35f63d17ef97382543c5a","sha1":"18378142d68658acd494cd0901d2dd071838aee2","sha256":"5d3829f881f019f1f27db960b4604906b51895edf8c1b1b1939a800c8ec3e115","sha512":"64ed6a91f941d3551aa4c7a7edfe8ce5278be873127840bf0b1cac64d3f843c08c099a027bb991ad75198141983ea9282cca40c4f3faf20552b5d1133f3f636b","ssdeep":"1536:dkuhw+ExiazA/PWrF7qvEAFiQcpmaB9sG6yVUn1:dEBgyVU1","tlshash":"4ab3d89069243c269037873561d1bd4ba2211503e737aebbf62d3db9cf9968b0f32e45","first_seen":"2026-06-10T13:02:22.997423Z","last_seen":"2026-06-10T13:48:18.177241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/css/rp_bubbles.css","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.547Z","timestamp":1781096509547,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/css/rp_bubbles.css HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2399\r\nContent-Type: text/css\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":12677,"size_decoded":3680,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e9b944b679bc0716e7c506ac6684ba28","sha1":"b7d753886ac0e8aa16f792ab354025f60376516e","sha256":"4bc5a823bc0d699486b8da7c703f02935d4e050fdf7e139ca77c6e744f9899f6","sha512":"50362fa9c95e04b2e32eb154429ca1d30e1777120d47d8f64f0b177bf47739bb53c7369eac6cf7888f3ad94bd885ec8eb8980b90214e56c181f507da2fdeddcf","ssdeep":"192:yxN1jBGISrhFui5bAmhfQYquf2ssl1eFSm5TvzSFUMGTyjsDt5E2YeFdpOHej:yxHjBcFFAmhJYet","tlshash":"8f42f1b8e50122095317dac7abdc4aede6945013be0b3694b5fc143fabcabbc0e614c5","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.3675Z","times_seen":145,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/common/jquery/jquery.min.js?tn=261214474892","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.567Z","timestamp":1781096509567,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jquery/jquery.min.js?tn=261214474892 HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 30987\r\nContent-Type: application/x-javascript\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89503,"size_decoded":32285,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-21T07:57:03.417724Z","times_seen":20017,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rnicrosoft-support.human-resources.services/media/a/tgmedia_deaa84b8b60748c0af330255c1ebb10c/bg.png","fqdn":"rnicrosoft-support.human-resources.services","domain":"human-resources.services","tld":"services"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129","date":"2026-06-10T13:01:49.655Z","timestamp":1781096509655,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/a/tgmedia_deaa84b8b60748c0af330255c1ebb10c/bg.png HTTP/1.1\r\nHost: rnicrosoft-support.human-resources.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://rnicrosoft-support.human-resources.services/index/702b3ee46875400c9b429728ca8af72c/a67010b9a3b8c49f89eca04a28761a129\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 563694\r\nContent-Type: image/png\r\nDate: Wed, 10 Jun 2026 13:01:49 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=1569\r\nExpires: Wed, 10 Jun 2026 13:27:58 GMT\r\nLast-Modified: Wed, 10 Jun 2026 12:27:58 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563694,"size_decoded":565048,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"70328443f8af1bdd88c12b994502f49f","sha1":"60dec66a0dc8799e348d9745f72713b8e3a90488","sha256":"f81c019e41f15c9c15df268401adce6cd2514daa88de8a300d22475a3dd427a4","sha512":"16ca9867054bcb4504be848d76a60e2d2d8c75f26e331afb21d05c96fb207a80f1003c1aabdeeee6129a271d59a2ca0a7524a0820c2d2e3757bdc6e6cce0bd10","ssdeep":"12288:4FulxrhCOUCr/y51FjZ/WEf8GLkHLkwaljqcEG+14VAy8iqRV+:4FuHrhxUCrEWKlL8LET+14VO5M","tlshash":"dac42384b4c44ebc37e8172521b60dd9f2817370a23efedb95186eab1d6b90de5dc4a0","first_seen":"2023-09-22T23:39:52Z","last_seen":"2026-06-18T02:16:15.705092Z","times_seen":31,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"rnicrosoft-support.human-resources.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL3JuaWNyb3NvZnQtc3VwcG9ydC5odW1hbi1yZXNvdXJjZXMuc2VydmljZXM6ODA.\u0026hl=en\u0026v=ne1iDVwClkE7nKD3uA9Vqsvl\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=u7tnsjp8u4ls","date":"2026-06-10T13:01:50.484Z","timestamp":1781096510484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /recaptcha/releases/ne1iDVwClkE7nKD3uA9Vqsvl/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383127\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 16:24:46 GMT\r\nexpires: Tue, 08 Jun 2027 16:24:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160624\r\nlast-modified: Sun, 31 May 2026 02:02:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":894957,"size_decoded":384014,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (651)","md5":"49d699edf7deef7164836651f79d3f67","sha1":"3cc80d469f337c34b9b57ab471f05a22f171304e","sha256":"028677914128606be5bb3102143252095128c95afa6e194b8cd2de3ad73c9a5e","sha512":"0677d04ced30ac7da0f82991d2f1c76657761caa14776c1a3265f1e8bd189cd43f0e6c93e11a0f75e7bd850a7bf7d136fa7fff55a89c7b6f6908fadda632c570","ssdeep":"12288:CODDF/pdEnLMRTfuc/aMIu01i0HE09HpyZTEnU9LdAJ0Bf:J/F/pdAMT2c/J/0HEWHpJbQf","tlshash":"dc155cd9b7463eaa9221b4f160772008537ea426dc8c085d759a8df03db694f70b3eb7","first_seen":"2026-06-03T11:08:15.255921Z","last_seen":"2026-06-21T03:33:13.530144Z","times_seen":11968,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}