{"report_id":"f1b64198-8c2f-46ff-9221-73f688479da7","version":6,"status":"done","tags":[],"date":"2026-03-28T13:07:05Z","url":{"schema":"http","addr":"support.m365-microsoft.com/i/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"title":"Microsoft","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-09T00:46:07.891918Z","times_seen":1036412,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"support.m365-microsoft.com/i/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T13:07:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"google.com","ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2026-03-23T12:46:16.209031Z","alert_count":0,"request_count":3,"received_data":99732,"sent_data":1900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":5,"received_data":2701142,"sent_data":2417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1070,"comment":"","tags":null,"fingerprints":null},{"fqdn":"support.m365-microsoft.com","ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2023-07-12","domain_rank":0,"first_seen":"2026-03-26T17:26:43.977329Z","last_seen":"2026-03-26T17:26:43.977329Z","alert_count":30,"request_count":15,"received_data":1395792,"sent_data":8324,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-08-04T04:35:56.848578Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-08T16:27:12.81462Z","times_seen":21734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255089,"data":"","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-08-08T23:04:42.36062Z","times_seen":2113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f48977efc5541ebee7f5ba796b0b3f3e","sha1":"e2d214803e8acf08a76b566c0754446855a240e2","sha256":"dcc18c115f09761c108b2e313921da2d0fda4dda05692c0d2b6282684b8d5fca","sha512":"1a0926b65b947da9b132e5add31555530b525fcc780ca04299ab0a44f51182e28cf3bf204014230c235deb5c16d0d38e0e752b8e3ca057f1bff4d8cf982532ba","ssdeep":"","tlshash":"381102b31919a0394f3209a1e2fbdab5e442701cb15889dcd915dad42ebacc7ce14945","size":1006,"data":"","first_seen":"2026-03-28T09:23:36.597936Z","last_seen":"2026-03-28T23:52:04.664077Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"887dd63e845d0327e7a2f35e91fbb668","sha1":"0f0f52ff52739b42f84131d457f60e3e49afd5d3","sha256":"cce323ee4781811713e5cb29c3e99fb8635d86668ca6607e5d88f7fcb157b431","sha512":"88b50e22941c74edeed185bd3187d7dbe834a2582b857422ba2147921ae06dde2b046acd717896c02943c7b81ffdc083a265c30a6221451a31e9f0b7e123a3c5","ssdeep":"","tlshash":"3fc0922b61baa801433710a9bbab68142f1a78578203aa90390dea891f593a5455d59c","size":154,"data":"","first_seen":"2023-03-07T18:51:15Z","last_seen":"2026-06-06T02:41:51.61442Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8538718ba7ef910d11638d1a3c8f9330","sha1":"c70fee6b0957002934dd48f553d9cc7dd14e3fa3","sha256":"f37453fcdc4bd8d53e4f3aae68672cfa78e41777487ae684e3f805e6a8906eed","sha512":"920c145d211d48931af49b951dff07d2421049418c71aec6064cb1ff8d875a13da91848409c6c363cec08a77f36c273d128730fb4cf4448260caa24f1dd9dc9e","ssdeep":"","tlshash":"cca00255dd557490e476e5e5b4c79224d351a4402bc74d3020104d5c6a6a5455153f8b","size":64,"data":"","first_seen":"2026-03-19T07:58:56.374022Z","last_seen":"2026-03-29T06:58:36.148719Z","times_seen":6894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/js/userInteraction.js","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","size":2276,"data":"","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-07-23T22:26:06.942314Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/js/recaptcha.js","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","size":2125,"data":"","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-07-23T22:26:06.92781Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"31507e190f383a3f27839016a049b50b","sha1":"056f9a0822a847b4735ffb6fd89b45f8a10e26c6","sha256":"70ffb4953af216d4bf886c46225356e8f743b9d273c97ee3b3d5867b4ca1507b","sha512":"669587f8bd4426177a31bc247eebd00a5bc9b8d0b6d895a3fb91dc808f4949c71d6e7037d31cecd521dfa43842692f2bdb87f16d8a67c52b780cb23985fe204b","ssdeep":"","tlshash":"3fb0223b0832800a23cbf3e82f8c0c20a020302bbaa0b0cb3c0c0320cfc380820c0b88","size":94,"data":"","first_seen":"2025-05-23T14:13:30.294128Z","last_seen":"2026-06-06T02:41:51.614945Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bd0965a77446c4f7b75162448b0993e","sha1":"26eb25a62dcd6a427f52d966d9c8d034837efccb","sha256":"9197a5c1dd4387b26c3addf243669a22d9d4c2886e7d0d847a73aa6912b94230","sha512":"df9a5a303a4ab2f342ea86eb4c14812d0bcb7bffd060c49cd64f274b1a3f78d9644439e32f73570cc81a562d6050250a72851b8ed4b89e4ca34a606fb8ec996d","ssdeep":"","tlshash":"5dc0922b0c1309a06ab7482a4727b6448a289e334200e8a8fa6c05689f419002a98723","size":167,"data":"","first_seen":"2024-12-09T11:10:50.445878Z","last_seen":"2026-06-06T02:41:51.61575Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-08-08T18:40:12.119515Z","times_seen":2413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"93bd698d6547c122af112503680b6a41","sha1":"bc341a3f5de4db62ad8bf6ba6d6b013ea65cb8fb","sha256":"b8be673ea25b259a53d3fa3fa9e2fd8eda1cc3359112954d2f9a39b3c99bf986","sha512":"9739b5ae21aa99b5ab283fdda6f87acf5405abb7bcee48a773e1c067d5b5290ff17f1aec62139ffb091831590d27bdbfb56d63bee19188281c8d98fe2e3f9c09","ssdeep":"","tlshash":"de1129b378f31062057f61bb112b9318ba73c51b0944ce51b96c8a948f68e705e6a7c9","size":1087,"data":"","first_seen":"2026-03-28T09:23:36.636319Z","last_seen":"2026-04-09T11:06:46.700799Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5010aaa1729e9425d936e340fc99a10d","sha1":"2d10afc15b32adf2d81b43a0be22cf3357086939","sha256":"9cc3b846394fa897bd8ceaa0bc9a179b5f16fcadbe4981c2c87c0377f60755fa","sha512":"dc661f70f49c96b0124dd39540e5b6c0bf8dde7debc661fe9e2c396632f215ec8520464567c8bd047e7d17c62cde8dcc83d0ad3d7072e0bf3cedcd41555ce46a","ssdeep":"1536:65Os2rJpbTOHECH2p4PH51TvIImrXWRymyYO52L1:faB4SZ1TvRAOym3jx","tlshash":"6a73cf27ea1730dfdfbeeb416be5d1aa123ee255288304c925b701d2053deda26391dc","size":77595,"data":"","first_seen":"2026-03-28T13:07:10.794445Z","last_seen":"2026-03-28T13:07:10.794445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b565d39eed367e11033d2fd5f6df9d5","sha1":"c7fb7308a72b01ab93572ccd991479dc9e5b9f9a","sha256":"f97d7fd6a7eac56930cf6f24e81dd70d50ff1251808d7036083af368414dfa21","sha512":"d99104978c384a62bb6284d3e6f2f22b688a8b8fecfec3f17825df9920a116fb70a7bc6b5b704f435c1cd93a100d3773710f6f8090ef259520863ceef3cd134e","ssdeep":"384:+h/KiBk7oegujWQurL2q+UUy1gPbqGnae8J06Jq7T647dY/SAsW:gtBbwW1HV+KgDjaex6sW","tlshash":"aca2c8dcf671f0b8c1a3b1f4597b1109f3fa2951a8086838f154d5e42e71d9e812bfaa","size":22045,"data":"","first_seen":"2026-03-19T07:58:56.333055Z","last_seen":"2026-03-29T06:58:36.165095Z","times_seen":6887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d14d554e2d33e7b81b7700f1ce955f5b","sha1":"08accf5c2e27ba805a67d6b594b4e94c8fd731d7","sha256":"38ca6625f6b436cc29b96e318b4009776a1105b9750e660515da8219a16c30a7","sha512":"1064577ea5b0be0399a1302fc9f4d7bd26fdc980acd816132b0554684723a0e602d91cdf66019e1221a68426aac75ee03be2ca583a4097be30cb76e85132db38","ssdeep":"384:0h/aiBk7oegujWQurL2q+UUy1gPb+Gnae8J06Jq7T647dY/SAsW:idBbwW1HV+KgDHaex6sW","tlshash":"36b2b6dcf671b0b9c1a3b1f4996b1109f3fa2851e4086838f154d5e42e71d9e812bfaa","size":24292,"data":"","first_seen":"2026-03-26T09:02:29.057737Z","last_seen":"2026-03-28T13:07:10.796219Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aba89c72d6fcb7b6ba8ea0ba53a38a52","sha1":"4b3ff2f8fd788aa8671dc417b92eb74286e2b122","sha256":"f75031f3a2e6206040f0ab6c6158ce093ca84758f3960350fc01446c26a7201b","sha512":"a8e2f1eee98bd4627fc14f2fbaf818cae927f8fc1fa92c9da9d4c358bea39b2dc7ce9c9b285627eb7ae56e1ca3b53cf3436a95a7f2efeb0d5946c68e54196a82","ssdeep":"","tlshash":"7670000b2c08b000003232a0080f088a0232008000220e00000000802c3208a0802a0a","size":22,"data":"","first_seen":"2026-03-19T07:58:56.345449Z","last_seen":"2026-03-29T06:58:36.147946Z","times_seen":6894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c7d43e246593b6a8974eef961791349e","sha1":"4678f5d93d2e192b97e864d759a39179c265f4b4","sha256":"f5e7d82dc192b6edf368a5801fba8cb56703dbc605a01da2d9f158884eb61765","sha512":"d1bcce46a00991731203c482421c9cd7527ebf123b025fbb16d51c02be67cd7fb9a220aacdc08956bc063f5c88e41001e0612775ce07de1d4d9228e6d984ce99","ssdeep":"","tlshash":"0d70000a2c08b000003232200acf028a02b2808000200300000880802c3208a0802a08","size":22,"data":"","first_seen":"2026-03-19T07:58:56.32782Z","last_seen":"2026-03-29T06:58:36.145402Z","times_seen":6889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/js/userInteraction.js","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/js/userInteraction.js HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1181\r\nContent-Type: application/x-javascript\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2276,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-07-23T22:26:06.942314Z","times_seen":98,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 28 Mar 2026 13:06:42 GMT\r\ndate: Sat, 28 Mar 2026 13:06:42 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1006), with no line terminators","md5":"f48977efc5541ebee7f5ba796b0b3f3e","sha1":"e2d214803e8acf08a76b566c0754446855a240e2","sha256":"dcc18c115f09761c108b2e313921da2d0fda4dda05692c0d2b6282684b8d5fca","sha512":"1a0926b65b947da9b132e5add31555530b525fcc780ca04299ab0a44f51182e28cf3bf204014230c235deb5c16d0d38e0e752b8e3ca057f1bff4d8cf982532ba","ssdeep":"","tlshash":"381102b31919a0394f3209a1e2fbdab5e442701cb15889dcd915dad42ebacc7ce14945","first_seen":"2026-03-28T09:23:36.597936Z","last_seen":"2026-03-28T23:52:04.664077Z","times_seen":12,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":218,"dns":43,"connect":21,"send":0,"wait":35,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/css/rp_bubbles.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/css/rp_bubbles.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2399\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12677,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e9b944b679bc0716e7c506ac6684ba28","sha1":"b7d753886ac0e8aa16f792ab354025f60376516e","sha256":"4bc5a823bc0d699486b8da7c703f02935d4e050fdf7e139ca77c6e744f9899f6","sha512":"50362fa9c95e04b2e32eb154429ca1d30e1777120d47d8f64f0b177bf47739bb53c7369eac6cf7888f3ad94bd885ec8eb8980b90214e56c181f507da2fdeddcf","ssdeep":"192:yxN1jBGISrhFui5bAmhfQYquf2ssl1eFSm5TvzSFUMGTyjsDt5E2YeFdpOHej:yxHjBcFFAmhJYet","tlshash":"8f42f1b8e50122095317dac7abdc4aede6945013be0b3694b5fc143fabcabbc0e614c5","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-07-23T22:26:06.915693Z","times_seen":148,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":69,"dns":1,"connect":29,"send":0,"wait":32,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jqueryui/jquery-ui.theme.min.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2328\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13746), with CRLF line terminators","md5":"74fb9452a91ef09555eb92aa59516997","sha1":"b74731af5b28a90cca86fa1097c75d8f8419ab87","sha256":"11e1cf2b2ee76191e1556d414a6eebb8e9a357b5930ebbc06858162174b1683d","sha512":"0107fde1e003f418b9da20d5dc38ae6d6397e70c239406343ed995470c934e032c833a4b01fe6e776c699646d64c3d2d376c2a21d9b1180cd4b3d41764b6f318","ssdeep":"192:LwGIzlzymUh+4pQ8l6GcIPRBGWLTxBm9v5B6xBpYPzFhCNBjVs5y6sybYw9QoFYG:L7MzymUh+4x6GcOzDBSc7nfZBhVi","tlshash":"8652e850a4c2212dff13d53161e11ef0513b9281eda61f7c64aafbad62d28f8c4779b2","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-07-04T04:37:18.425659Z","times_seen":147,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":70,"dns":1,"connect":31,"send":0,"wait":28,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/bootstrap/js/bootstrap.min.js?tn=261214474892 HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 10945\r\nContent-Type: application/x-javascript\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":39685,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-08-08T18:40:12.119515Z","times_seen":2413,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.js?tn=261214474892 HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 67989\r\nContent-Type: application/x-javascript\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255089,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators","md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-08-08T23:04:42.36062Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/js/recaptcha.js","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/js/recaptcha.js HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1062\r\nContent-Type: application/x-javascript\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-07-23T22:26:06.92781Z","times_seen":78,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 06:10:56 GMT\r\nexpires: Sat, 27 Mar 2027 06:10:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 111347\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24ab119daca047e256b1ef36d6a0ec02","sha1":"4bd663653b55f8448c6c58c02b28851c41f64a4c","sha256":"952367c39542f1f7a7444b1d38c94fb932299aa63315ba204e71448695bd11c2","sha512":"97bea09c2fecf0111048194cb47b59d35968bcff1a34877bfe7344b157461ca1d84fa7119a1c7cac7a85c709a9e2289338cf8f26a76fe10d523dffd3c952742b","ssdeep":"1536:h7Rpgh9C9ToL9gTNfWNfK4RxrDldthXwW5l1Dx7:h7ArC9ULiTYNC4RhLX1","tlshash":"27838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-26T03:15:39.037579Z","last_seen":"2026-05-30T17:30:22.949701Z","times_seen":10417,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/css/rp_tooltips.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/css/rp_tooltips.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2514\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13532,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b2f2bce67a3c4ab9b0f17372f010918","sha1":"eb379f291a848680ddd5d3ecb4e59818f9a602e3","sha256":"9bddcf9a5fc7baf7e7bdfe849437591ee53dca4206b1b8af6a705ada50fbadba","sha512":"0c6ddfcdb4ee038c98c1eb9faa6af8df0d55bd5f74704f2ab51b20e6c107b8757be11640fd5753c4a955a64e451fff661357c2c61c769ed9b6209416bf9bcb27","ssdeep":"384:yxiQ952UOM7FEOBO57QNZhgfR6H9CWXkOX:s52UOM7FEOBO57QNZhgfR6H9CWXkOX","tlshash":"6152755ade1220825333d35cebf20754eb653023ca824479faec619ddfb8758aa51fc9","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-07-23T22:26:06.909374Z","times_seen":148,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":66,"dns":1,"connect":30,"send":0,"wait":31,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:43.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 00:32:39 GMT\r\nexpires: Thu, 25 Mar 2027 00:32:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 304444\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:43.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3 HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 28 Mar 2026 13:06:44 GMT\r\ndate: Sat, 28 Mar 2026 13:06:44 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8461de2ea2f2601eaf21ad5931e74681","sha1":"115fa39dad73b3bedfd6778a27122aa30d2826a8","sha256":"9b81e9a5eb8a2c4f7a3c7d22dd92bebded7d4471ee300444c67c678b4a893cc8","sha512":"1ab5c97bd41c499b2b1e71f740c493d889e0fe35046f77755a34c7aba0f0ced418610881c01148055d7470698e2332cf375a543cf87313d0cc5b5ff0de5ff3fa","ssdeep":"","tlshash":"e3b012731575c43c0c020203d627a7ece0435074d650c8f841347fd841690e7522d500","first_seen":"2026-03-26T03:15:38.909416Z","last_seen":"2026-05-02T10:21:31.183563Z","times_seen":9888,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","date":"2026-03-28T13:06:44.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 00:32:39 GMT\r\nexpires: Thu, 25 Mar 2027 00:32:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 304445\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/i/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T13:06:41.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /i/a8472e4c0bb944ac1b09948052f48dd44 HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 346\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 28 Mar 2026 13:06:41 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e9002c918637a0110cabe9a3e8c0b460","sha1":"076b9554d89acd09aed20e45a8a5fabb05b7d832","sha256":"a68ba060437c6126e2537acac1661e752a6fce8fc5b37c8964dd0e617dde724b","sha512":"e29a494c779a33eae272a3faae8ddad92cdc2eb1e6f9bf6fe105b899a1c74dc1996fb611aad6f14f20bed3bf93259f228d1eec778270672f26ad4f368a1d9175","ssdeep":"","tlshash":"a1d02bad2500cc0115b1ef630ce1e979a81751839282a255b4c475275bf02560e1b5c9","first_seen":"2026-03-28T13:07:10.782736Z","last_seen":"2026-03-28T13:07:10.782736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":193,"dns":128,"connect":28,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T13:06:41.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44 HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/i/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 28779\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":111579,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62265), with CRLF line terminators","md5":"15ad767faa8bffe294e45207ba512f77","sha1":"a1fddbd1eb992e58999c52f5b7486b2fb131bf30","sha256":"bf65569e44dd59038264763ff8a60e82856f9c69ec4dcff4a80b1f04f5c410a2","sha512":"647ec232973aa6e894818af0f93234d341e97d2f65b4c38791f1bc6c8dfe22b8ec1cce7d5cff517e5910194e7b1dab12cf90dfdcfad8ef722789431796e27678","ssdeep":"1536:Qkuhw+ExiazA/PWrF7qvEAFiQcpmaB9sG6yVUno:QEBgyVUo","tlshash":"f0b3d89069243c269037873561d1bd4b62211503e737aebbf62e3db9cf9968b0f32e45","first_seen":"2026-03-28T13:07:10.783936Z","last_seen":"2026-03-28T23:51:24.573664Z","times_seen":3,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jqueryui/jquery-ui.structure.min.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 4962\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15418), with CRLF line terminators","md5":"909ce025471e11a770dfeb266d02384a","sha1":"b915957fc131db3ec221e130af9b2023d039d458","sha256":"4e2ec0490ffa766a812249114b99f7b2b578c750619f3175d948be265f07af11","sha512":"82888f071c8f992d6e33f2bf3e7e8a19bd1cedd4d7f9923151d02947cac846e61b061dbe855706d12ead3dac762e16d4429ff675c5192c9af86239acd58fe77d","ssdeep":"192:Ly4ncR8lOG1bRCNPbtqxlhIuxrjv572hk/k52bZuQEjQDMsrsUR9P:L1cR8lOXHc11evs","tlshash":"c6629730e6572d3ebc33c25064a19efea319c167ebb291eff146910287ad49146bf858","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-07-04T04:37:18.425166Z","times_seen":149,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":51,"dns":1,"connect":33,"send":0,"wait":29,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/media/a/cmedia_d94bc318633f4644a5adf09477e66272/Microsoft_logo_2012.svg.png","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /media/a/cmedia_d94bc318633f4644a5adf09477e66272/Microsoft_logo_2012.svg.png HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 50850\r\nContent-Type: image/png\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=2737\r\nExpires: Sat, 28 Mar 2026 13:52:20 GMT\r\nLast-Modified: Sat, 28 Mar 2026 12:52:20 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 545, 8-bit/color RGBA, non-interlaced","md5":"1a629996fba3a1564999cfd130c01e1a","sha1":"e647b070f564652ebb33694636b10a9c4a06af77","sha256":"f5ee50165db7c936e7024f2eee564a69039fe283c76ebfda89075ae67e0c66a1","sha512":"a5915665df4f4d4b5f6bde026469d12744cb231f52a1a036a087aed471910c282d0c04bab060cd9be4b8c61e1e27d68295d3f3c09ad1354ae0456fd28e3b4a69","ssdeep":"1536:vmcSXZ/ro6gcEM9lMUDmT/WhPsX+FoPIWrzMd:vTSp/ro6gcnlMEFhPlUIWrzMd","tlshash":"e233cfbb4d42dcacec75a3f14097791b37264c6457a9b391c2be32988f4b2b0d405f9a","first_seen":"2023-11-28T19:57:40Z","last_seen":"2026-06-20T12:31:05.373195Z","times_seen":24,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/media/a/tgmedia_d0cac4fa5fca4f7ba05cc317067812bd/microsoftbg.png","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /media/a/tgmedia_d0cac4fa5fca4f7ba05cc317067812bd/microsoftbg.png HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 563694\r\nContent-Type: image/png\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=2147\r\nExpires: Sat, 28 Mar 2026 13:42:29 GMT\r\nLast-Modified: Sat, 28 Mar 2026 12:42:29 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"70328443f8af1bdd88c12b994502f49f","sha1":"60dec66a0dc8799e348d9745f72713b8e3a90488","sha256":"f81c019e41f15c9c15df268401adce6cd2514daa88de8a300d22475a3dd427a4","sha512":"16ca9867054bcb4504be848d76a60e2d2d8c75f26e331afb21d05c96fb207a80f1003c1aabdeeee6129a271d59a2ca0a7524a0820c2d2e3757bdc6e6cce0bd10","ssdeep":"12288:4FulxrhCOUCr/y51FjZ/WEf8GLkHLkwaljqcEG+14VAy8iqRV+:4FuHrhxUCrEWKlL8LET+14VO5M","tlshash":"dac42384b4c44ebc37e8172521b60dd9f2817370a23efedb95186eab1d6b90de5dc4a0","first_seen":"2023-09-22T23:39:52Z","last_seen":"2026-06-18T02:16:15.705092Z","times_seen":31,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/\r\nOrigin: https://support.m365-microsoft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 00:32:39 GMT\r\nexpires: Thu, 25 Mar 2027 00:32:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 304444\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":119,"dns":1,"connect":29,"send":0,"wait":30,"receive":129,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:43.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 211795\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-09T00:49:09.380296Z","times_seen":959256,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":82,"dns":0,"connect":28,"send":0,"wait":29,"receive":36,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/bootstrap/css/bootstrap.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 23025\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":173441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"cb7bd9e2b45319f4e7c2e613b8f6c0e8","sha1":"6175c12bf84a28c6a281ab923752481b6fe58056","sha256":"2797160125a75dddc44d8cbee398bad6770dbfe2f57479ca65c3f4142e1a9df0","sha512":"dcdc72d350803257cfe7729215a4b3ac99ad9c6cdd04d466b570eea3cde3f5225d82ffba496ee7f171dc65650314fa95f2a4132840ec74c9cf060027295fc9fa","ssdeep":"768:yER2n1QySUVLqqkXZTMegYFomDquiMRNTHU44DMIMETn5VBKCkcuZGB2Vcx/cXiC:Wn1QyiLZGB2VKcXihoiL3yFITMK4fWS","tlshash":"0504769de60131c22633d768bba38d42ff062263c606c97abfed62544fb94545631f8e","first_seen":"2023-10-13T13:05:14Z","last_seen":"2026-07-23T22:26:06.928715Z","times_seen":390,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jqueryui/jquery-ui.min.css","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.css HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7882\r\nContent-Type: text/css\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":32109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29164), with CRLF line terminators","md5":"4ef4ec09fd03e96ac23fb3cb85c16746","sha1":"a1a208b1ef92c7e604ae53ea283492eeb045d1d7","sha256":"b0b53ea606e7397f37666242cd8d63d17186b3cc8513d49a9852bf4828a1fc46","sha512":"cc021c31550069f904fa63dcde06124cd77c74b61976f68c40756c80835ca51e06f3f7886fab886cef861eb7ff3b22a492cde7ea705206f0aa388967d3d9649d","ssdeep":"384:6CwiEtw1cR8lOXHc11evBMzymUh+4x6GcOzDBSc7nfZBhVi:plEtPXHcEBMznURx6GcOzDfBhA","tlshash":"dee25430a5c2242dfe33c23061e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-07-07T18:11:37.695179Z","times_seen":163,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.m365-microsoft.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"support.m365-microsoft.com","domain":"m365-microsoft.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:42.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m365-microsoft.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:11:02 GMT","end":"Sat, 13 Jun 2026 00:11:01 GMT"},"fingerprint":{"sha1":"63:5A:79:DC:0B:BC:16:9A:9C:DB:5A:8A:45:91:64:8F:F1:B6:C1:8A","sha256":"03:6F:28:DB:13:E5:8C:6A:CF:06:11:41:DA:DD:3A:2B:77:F8:ED:B4:7B:AD:DB:98:51:47:B1:ED:4A:07:9F:94"}}},"request":{"raw":"GET /common/jquery/jquery.min.js?tn=261214474892 HTTP/1.1\r\nHost: support.m365-microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 30987\r\nContent-Type: application/x-javascript\r\nDate: Sat, 28 Mar 2026 13:06:42 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-08T16:27:12.81462Z","times_seen":21734,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"support.m365-microsoft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://support.m365-microsoft.com/index/a0dd0ad1576f40a587da7e4d05daa02f/a8472e4c0bb944ac1b09948052f48dd44","date":"2026-03-28T13:06:43.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.m365-microsoft.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 28 Mar 2026 13:06:43 GMT\r\ncontent-security-policy: script-src 'nonce-AD3PIiC-vcQ21vlknWo_Iw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96022,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47131)","md5":"22300804a085823d5c18218c1fda5915","sha1":"ad03dbff836075710c83cbb0334ab959a0fbe285","sha256":"518eb49cc288d03554a56944fb13883f62c488ed20940e1534dfa0d8f954fab5","sha512":"86256636acba38889a5a009388b71260eb3b7cb5e1ec1537951546fe60d0a3f0590b8c2499713147fb57c5a462b95c23645f412d0b856474ce9fd890a1f8ffb3","ssdeep":"1536:y+kf7JW5Os2rJpbTOHECH2p4PH51TvIImrXWRymyYO52Lc:y+kfFaB4SZ1TvRAOym3jo","tlshash":"b293bf118807204adfaf9ed123d9aa75b63e9211304280e527ff17d39daadd752393dc","first_seen":"2026-03-28T13:07:10.789164Z","last_seen":"2026-03-28T13:07:10.789164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:43.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 211795\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-09T00:49:09.380296Z","times_seen":959256,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":83,"dns":1,"connect":28,"send":0,"wait":58,"receive":20,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9zdXBwb3J0Lm0zNjUtbWljcm9zb2Z0LmNvbTo0NDM.\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=h9yp0k5yar1b","date":"2026-03-28T13:06:44.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:29:47 GMT\r\nexpires: Thu, 02 Apr 2026 02:29:47 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 211017\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-09T00:49:09.402418Z","times_seen":704678,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}