{"report_id":"f7b15a29-44c1-43da-8a82-a058e44baafa","version":6,"status":"done","tags":[],"date":"2026-03-29T12:24:58Z","url":{"schema":"http","addr":"teams-meeting.info","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"104.21.14.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"teams-meeting.info/admin_login","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"title":"Admin Login - Join MSTeams","dom":{"size":4451,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e17a4676cc8176cec1efa61f6fff7d00","sha1":"5c2ff8f3fdc4f96097f9f80d5faf565e50368af1","sha256":"90be24c99b7a0276938ec35f3f30a686c6fda51a8f9682df10e7afea2cb8a1f5","sha512":"afe7e2371e854c1a7dd6a47a7961839b6ccaa566f7b1a2e67b1dd880de0cc47db430fc4ce81fc9728b9f41e0af87c36360a81b15380bae87948d969999b08ad2","ssdeep":"96:nxGu/GWSoIY9+DMW3YSLQT7X3Y7EIb+8DpfQhArDwU2BHAakbHD:8uJSzY9wMGYwQT7nYoIdDpGyaM","tlshash":"879111078ce44c0a920042d06cebb48fe5a5e15bdb09ec55b6bc096e3fd1fc599d396c","dom_hash":"domhash61a8e0a75892b1f9622bb3dc49da03a7","first_seen":"2026-03-29T12:25:03.797577Z","last_seen":"2026-03-29T12:25:19.130574Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teams-meeting.info","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"104.21.14.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T12:24:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"teams-meeting.info","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T12:24:59.134593Z","last_seen":"2026-03-29T12:24:59.134593Z","alert_count":17,"request_count":17,"received_data":683559,"sent_data":8848,"comment":"","tags":null,"fingerprints":[{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":17124,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/main.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b00a540cf10daa84d5ced6c016b96d","sha1":"7b2e1bc09e305f8568d252d8a367b44d7961880e","sha256":"0d0460d581ffc10ad33ae9b000b5f9530e1995f2420a0e8f5ef2d56054ab3ce4","sha512":"b6e806f4b981bc1fa5605c0249c2179155c79e1bb37f15ebc2f8825bf768bf8acb2564f0766f8b0b1c5acdfb096a9c102e3b69a0b31259bb3c724430eb77b2df","ssdeep":"","tlshash":"3a11590978fa54b611b7707b56bb54400a1a015f8319cf42f65c0dd12f9550aaff0b5a","size":955,"data":"","first_seen":"2026-03-29T12:25:03.830027Z","last_seen":"2026-03-29T12:25:19.148753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/jquery.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be9cef8a4f454be76c10e60deaf6244","sha1":"193972ed6a0d264946a38075d465ce1ad4c3b389","sha256":"f3bf1dfc30c3d03223733bf3f8db208eac938252d5bd7fcd67443e3868815066","sha512":"b9a5d940526e32800083791129719aae2d90a2daf9a7004f425b9785b88e11e524c549f728e6ed10b0c7bed50f5cc7abe78fff2db487fcf062155822eec4084c","ssdeep":"3072:nppclgk+FTk4XdMdz9lWJUXVoyvf3B5VU3rs4bse:ppcQFTdMdz9lWJUXhvvB+rPbse","tlshash":"3de35199bae621319207f03e9e6fc808b236544f2a8ded057d0c51a55f1493c97fafe8","size":146063,"data":"","first_seen":"2023-03-07T12:59:21Z","last_seen":"2026-08-10T18:41:09.149159Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/popper.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b7939aa72eb3e868c97034ef4393b26","sha1":"0cc5eebfa95c9842ab81ee0a3f2f80125e478c21","sha256":"ccea1a3017a5bd3625d13fe527afefedbb2c50bee88bc1f02f9091e1716adcc6","sha512":"812323b51a8c4a9805c56594898a920826ef356425fbe9b19868c449aacc703b6d66876890098f021b71b00df23afa126dfb5b17846e25d37731f66a2aaebdea","ssdeep":"768:iQVd94YIPP//PWwDl2RVcqz4T8yruM7rukQNuCYG/QZnc5RJCLBJVeS2zRkfPMTb:pGHnWwDlecluM7rjbA5UeEfWb","tlshash":"8ef2628d3ae231758607f07a896fc8097236545b1a8afc00394ca2945f74d7c97bbfe9","size":36755,"data":"","first_seen":"2023-03-29T21:39:12Z","last_seen":"2026-07-08T22:53:40.783582Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/bootstrap.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b59eef92fd9e0484ce940d5d218f86","sha1":"8d1a351def4272def5eecf8a8b5acae87f8ace88","sha256":"88490bace0ec9902b35fe6066d2e615768817371d4f73da6a619bad8836f73c8","sha512":"bd7cf8219c0c4659cd796ac320baeca46f3af68b9019721e4eff09ab4c79092a7a609963561b7a0d3b48160d0aa9f3042721cecf8bb2e5c014e7525faa8068bd","ssdeep":"768:L0bJLt0SQGhR4TT9x4DuFSoUDRfBcJp2+7+7qd8TuJQUaQoi3u+ailJ9ZyC6H8Im:LmXXhOKLD+cWaU5C7tDtE","tlshash":"d693120a76f9b472425bb036897f8946b635584f660abd087e8c51dc1f1cc3862b6fbc","size":96500,"data":"","first_seen":"2026-03-29T12:25:03.81086Z","last_seen":"2026-03-29T12:25:19.143892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/custom_script.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ebf846f88fa66f8ba04104afbc9a786","sha1":"d82fa2e7df107bc348d8f26b7b2933f452444f77","sha256":"470a1557604a3180023c83e0b90067a2a42f5667dfb2c2a7db2f30e3ef67f62d","sha512":"1276fff4a0092c6cfc8e4dbc39d75669a8fe5eab713e5db2bdb1ba9ebac2796aa6017f72e1e2f3389e8a6781484883a29ab0c38256c8c6ff08bd626bc404a0bf","ssdeep":"","tlshash":"2131ccd1d37d368e0a7134bd092b468c16ac7930e5071eba78711cb009edf39311bd26","size":1588,"data":"","first_seen":"2026-03-29T12:25:03.819971Z","last_seen":"2026-03-29T12:25:19.138843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/admin_login","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1af39a664119eb2d00a3b8558dc0cb49","sha1":"7e4e8bc800136941c675860e9f1c9aced7b6c7f3","sha256":"61b9f10ae506b150f148cea4b951a61c0cf461d589554f5f6abe6f87871dad9a","sha512":"57f33ac488038f5c520aea03de64ea012ddb100b1e48684107eab6e41d0064f522c68c424a11db54030ec5283f3b6a07cc608588d598736e365eaa9dc37aa1a8","ssdeep":"","tlshash":"9fa0121e4500501ea7400280c31f158d8152108f0541e712e4174b431e00074b047c49","size":79,"data":"","first_seen":"2026-03-29T12:25:03.838207Z","last_seen":"2026-03-29T12:25:19.152583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/script.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c08aa14aa7fb51c0703bd8bc7a58fd4e","sha1":"bb8aa879d82b9651518b5d1771386cff4d2850f6","sha256":"480614113472ab1028cd0f39eb353b748971dc4b7ec5d06a09e8e3504d000fd8","sha512":"aebb7e37e5f7aba304022bf43042b91e057d3e6908abbf9adecb34693c26ba23bac4667cfc181167e7ada7f2efd3cd12f83cdf904ed97b46655d96d1d58bf2bb","ssdeep":"96:ku1lyBByjs33y3HvH/yemFSPSKytgFVKy/CioVBWyi:kumByjs33y3//yemFSPSKyqFVKyqnVBy","tlshash":"d391377a76f309340aa3e0e6a7eb8749392504132842c6847d7d56281fade46b0b53f7","size":4604,"data":"","first_seen":"2026-03-29T12:25:03.808718Z","last_seen":"2026-03-29T12:25:19.137465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/admin_login","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76817f435df4e140e388b2d14fccf191","sha1":"b7ee72df8d7a0003e005e607cd0033432539c6cc","sha256":"df9941e333fb1a1aad248e5d5b5d37a0c55e6704dba080504249762a70ad6a80","sha512":"e10e8a209de8bffb57a614ce8c006dbb584fa904dc4328a1341f275567355264e0f1864a3bb0ec76b054f7c7d40e58386e758b50ae6161cf562d90f2e8973e7f","ssdeep":"","tlshash":"dbb0121e4501501ea7400280c31f158d8152108f0541e712f41f4b431f00074b047c49","size":89,"data":"","first_seen":"2026-03-29T12:25:03.840589Z","last_seen":"2026-03-29T12:25:19.154455Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teams-meeting.info/","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T12:24:36.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sun, 29 Mar 2026 12:24:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://teams-meeting.info/admin_login\r\nserver: cloudflare\r\nset-cookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp; expires=Sun, 29-Mar-2026 14:24:36 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPpEyiuhx0en3QQ8whIdSOzriteOJCdJYEg1AnbQLVpFg7gqOUzK4S6JBRYmPVWbtNRCXR%2BR0zsUH6RnC%2B%2BLLMv%2BBBXcPd%2BhonQrCDfcDtuNVuB6sWD9ZSd1JSZ8%2BiHdvx9PnqI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e3eda3b19330731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4581,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T18:42:46.185495Z","times_seen":17940619,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":31,"dns":15,"connect":1,"send":0,"wait":229,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/css/fontawesome-all.min.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/css/fontawesome-all.min.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 8271\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"b491-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7IwSAVuvEcFe9dADA%2F4nrY9epEqn4uOasGpKFtTGN0XB9PTKXxmFCHS0LMREpXkUyuWuBHrKMvBjLjv4l4uvWqQaLdsWfX9fKpG6yQ8C3kvjNxuia3NWSqVbH9uS6wXpI6IRlw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3e8f8556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"c9f523258e40ea31ce0a2fe28fde69fb","sha1":"ae0ccc4c9da2ae2faa030357523a73edb664474c","sha256":"439a31a71c1ffbf435aa24452672dfca46132af4962765e3521fffc16ac356f7","sha512":"8bccc435a796abc008149b1ab25c28071912e74114c94e0a70765720a2626ebe8eadb5e5a4f4c720a7fadd21b91b5c3e38b775fda8d76dd8045427bd7c82bf92","ssdeep":"768:TLXL12Zl9feYRwW+BNTbMCoBz6CDg9D+lQz:TLXL1ifrRwW+NPMCoBeD9Ks","tlshash":"9a2303acd1bf08814318e485274b7340b329baaf9c494c5df282be8ddbd167991c6bdd","first_seen":"2026-03-29T12:25:03.802303Z","last_seen":"2026-03-29T12:25:19.13363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/admin_login","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T12:24:36.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /admin_login HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v41DviMa3y%2FLzOHb3bqzlY7mPCfzEZcjMr%2Fwosn4gWtMMqJEhj7cet5YARVf2VYkXbOjMJPaMXY993%2FPTOcEN5bPc2C5VElGnAZd%2FpN6Vp%2B1%2FbEFyK8hr5t4%2BflA%2B7vpD2k62b4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e3eda3c9c210731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4581,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e8843d0375055355371a884eac7dfa18","sha1":"103d80faaee677bad01119e222005771cd557ac6","sha256":"7f0e3392d57c483e4d3260b533ccc952dc8da7cf803d3db8da814e7b710de950","sha512":"454fe823107989af674d3647fb100348453d9c0fc527fef621fac35c676c99864c24f8b3fd6bc485bf17bc7b6bd4db28495eaced2a25bb63b7762fbb0046ff66","ssdeep":"96:hGu/GrXp3m93Px+GG9XcrDVJ2BHUwakbHEM:sucO5QswabM","tlshash":"939130078ce4880a920042e06cebb48fe556e18bd705fc49b6bc196e3fc1fc49ad35a8","first_seen":"2026-03-29T12:25:03.804736Z","last_seen":"2026-03-29T12:25:19.145341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/css/bootstrap.min.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/css/bootstrap.min.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 26898\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"33af1-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgDDMgW0iwOdnYv3Eydp2qE3mlzEzC1pEO1k2Dkg6B6Js8ngwOLfVcTE3N0E1SIHNzgv4HFCwioImKhL0SZD56ccNN73LoErYky41Y0SgfBFoZEbNpd61QSZ5GNJONw11FLQsnM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3e8f8456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (625)","md5":"000f47377f1a14afc0e69690dcd19f15","sha1":"09a93f7977df3a37c1de1476f56f56f627721ee9","sha256":"b2e5a53b87cba43b8e187d2d4348252c01dfb097bad6ca298fb57e98d2e5f9b3","sha512":"e642f87d9493acfb20e99559ee1a656f61fc911ff3da75ab852ccbc34833d070fec4794c46a25e64d4d3ca84c2a89c73685c96925f0cefb7704528ba16e87a7b","ssdeep":"1536:Y2FmUBDJEbTxCHjEHd7S2sH5DE3UtusWRMQmUilMJ53whqKoHkj0Y7j+YJJ:YIwTxCQHX3vKoHkj0Y7j+Yf","tlshash":"8624541ae8f22959584b816c16e867a5737d8087cb29eeb97d5f3340cf4d1c18db2e8c","first_seen":"2023-07-22T04:51:21Z","last_seen":"2026-03-29T12:25:19.1498Z","times_seen":5,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/script.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/script.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:38 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1230\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 11:46:39 GMT\r\netag: \"11fc-64caa128325c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Syo4D7%2BYSiYG5%2FASrm7xWLrb5vzUNMtkg1Gf%2Blz8%2F72uUs%2Bdf3%2Fua1zWLt%2FIoyyTOm3DTcK5JaD3weLAZaQ2wDLUx0k6YMK3EBChOSn98cEmBmwTt1EqOQyiFoiyzVIaJQWU4GA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafa456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4604,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"c08aa14aa7fb51c0703bd8bc7a58fd4e","sha1":"bb8aa879d82b9651518b5d1771386cff4d2850f6","sha256":"480614113472ab1028cd0f39eb353b748971dc4b7ec5d06a09e8e3504d000fd8","sha512":"aebb7e37e5f7aba304022bf43042b91e057d3e6908abbf9adecb34693c26ba23bac4667cfc181167e7ada7f2efd3cd12f83cdf904ed97b46655d96d1d58bf2bb","ssdeep":"96:ku1lyBByjs33y3HvH/yemFSPSKytgFVKy/CioVBWyi:kumByjs33y3//yemFSPSKyqFVKyqnVBy","tlshash":"d391377a76f309340aa3e0e6a7eb8749392504132842c6847d7d56281fade46b0b53f7","first_seen":"2026-03-29T12:25:03.808718Z","last_seen":"2026-03-29T12:25:19.137465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/bootstrap.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/bootstrap.min.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 17587\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"178f4-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8QSoFQ%2FZ0kP%2F%2B6lVJqIQJ7QDPZiPfOl%2FD2xM52kydC5l7qLaoI1d7FW34dchm2nAZWQdwWbqAVX8PFgIA3UBCzKtOIDAktC%2FRKrzoDdAX0uF6ATEnKI5HzkihlfM9JZ6Kg2UXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafae56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"29b59eef92fd9e0484ce940d5d218f86","sha1":"8d1a351def4272def5eecf8a8b5acae87f8ace88","sha256":"88490bace0ec9902b35fe6066d2e615768817371d4f73da6a619bad8836f73c8","sha512":"bd7cf8219c0c4659cd796ac320baeca46f3af68b9019721e4eff09ab4c79092a7a609963561b7a0d3b48160d0aa9f3042721cecf8bb2e5c014e7525faa8068bd","ssdeep":"768:L0bJLt0SQGhR4TT9x4DuFSoUDRfBcJp2+7+7qd8TuJQUaQoi3u+ailJ9ZyC6H8Im:LmXXhOKLD+cWaU5C7tDtE","tlshash":"d693120a76f9b472425bb036897f8946b635584f660abd087e8c51dc1f1cc3862b6fbc","first_seen":"2026-03-29T12:25:03.81086Z","last_seen":"2026-03-29T12:25:19.143892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/css/iofrm-theme12.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/css/iofrm-theme12.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 1847\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"2b3f-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDtdRPNSV%2FLd8JlV6CBIVkjdITGVn3jzUHKKEsR%2F2Z4ypfqmSLCCmvNHMVgOFE23IZFy802oFF4MQrtXy7Z63SdpbeKtvvdZX0BY4vEBz3zs2VgfBcncNml5nUG3leZIjk41j9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3e9f8856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11071,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"727c1b3580bb7a6145e251f254e81631","sha1":"2629d3861f7a64b980bb9031f403312eb2d40b64","sha256":"73811097b581ee121ee26eaeebb09a9b3fd326d9e0b57bb494311572fd3540d6","sha512":"761d633bb9cc53ed0f7b7ca9d9e6c6bf337856dd020ccee95116b91e8d0aa6b5b7e0eb877445f11d1e445b6b26e39b61c53b1036a19fb8e11107e8eb4677c8c1","ssdeep":"96:CmePMxeVaDpV5P84TM/cSs70tWLO1sTj6UKk26F663FKLtyYdYDf/ZnZjVZjVL:DRfTatWLO1sTj6UKk26F663FKQTZr","tlshash":"8e325a1adc210e56737acd2c5ac4f4d9d71e41e0dc4d2fadb0a618ac53cca84a4bebc5","first_seen":"2026-03-29T12:25:03.81268Z","last_seen":"2026-03-29T12:25:19.135245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/css/style.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/css/style.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 1157\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 14:25:47 GMT\r\netag: \"de1-64cd4874cd0c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSi2pN3LzgH081435jeR6PfC9LVlUvN0cNgtlgrfjRZMekfDKttAzs4GM4zV40SO04A89CZFQVMkgsAdh%2Bb8pSvbMuwUQxHwqU0KN8%2BQlR8LgWcc5jR3%2B4%2Fnr48L9ddq44RCtZw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3e9f8c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3553,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d1733d49218654976ba6a4adf6882e28","sha1":"f2300b493e59256e5e3ee0f9b0078421792b316e","sha256":"19208524bef7052b4e276f1a31d98d05be76dcb76ba82452a4cede3e8af2325f","sha512":"ac89bfd8acb8c1e4bc81a3406c57652e05dc9d65be685eb34f1d5b36fb7d7b2961ff9d0e24d29b6dcbfd3e7eb195744002dfa1c32efdd1aba111a4afc0a467ee","ssdeep":"","tlshash":"397102927b670902b5079858bbfbdb52325c5483900edd797f9c7688cf4a2a89262f4c","first_seen":"2026-03-29T12:25:03.815099Z","last_seen":"2026-03-29T12:25:19.141532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/img/back-arrow.svg","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/img/back-arrow.svg HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 11:34:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M66Cbg9%2BVZHjSIw4QaYJHguop5W3QGoOFDOFmWpxq1mV7zHKTtNjwz1QrgjbCpJvTUEWxKt0TWxczyWJN8%2FVEGvtae3EZ8BcjT955jXTySEdzIwOF3zsdvECJnJCcVJYU%2FBamIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1ef-64c4551420700\"\r\ncontent-encoding: br\r\ncf-ray: 9e3eda3e9f9056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":495,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f69ae82cf40a6893b221e65cfa707a21","sha1":"0d84a783bbbde28942bf3f76d76f2db0676a641a","sha256":"294f5bc86eef229164d295fb33d026309f129fc2d4856123db98443ef45d7d50","sha512":"97f4c6bc795eb9c852a5bd4ec0b96e4f923fa63c86837139003b4eda92f6e7850b9ad6dff0ee1a14537b59040a7998ce1d4f2bea7f01c587f39c10934d45b14c","ssdeep":"","tlshash":"9af02733d31c61ec894bd3145b2f6a26121de854aef901da6bae1225211ace3e06b918","first_seen":"2026-03-29T12:25:03.817386Z","last_seen":"2026-03-29T12:25:19.150553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/popper.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/popper.min.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:38 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8775\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"8f93-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNpHzbpuiIDdttKZynXz4Kzb0%2F4HUU8AeGefAzj%2BIMpPpdY7scQrXfPipz3ztp%2FyzaWnoTzsEgZ2g8TW69tdAvEJL7pPWMxzLn72too2ItWOOAWtJaAXVc7W4Y4SoY2tF50liaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafac56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36755,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (639)","md5":"9b7939aa72eb3e868c97034ef4393b26","sha1":"0cc5eebfa95c9842ab81ee0a3f2f80125e478c21","sha256":"ccea1a3017a5bd3625d13fe527afefedbb2c50bee88bc1f02f9091e1716adcc6","sha512":"812323b51a8c4a9805c56594898a920826ef356425fbe9b19868c449aacc703b6d66876890098f021b71b00df23afa126dfb5b17846e25d37731f66a2aaebdea","ssdeep":"768:iQVd94YIPP//PWwDl2RVcqz4T8yruM7rukQNuCYG/QZnc5RJCLBJVeS2zRkfPMTb:pGHnWwDlecluM7rjbA5UeEfWb","tlshash":"8ef2628d3ae231758607f07a896fc8097236545b1a8afc00394ca2945f74d7c97bbfe9","first_seen":"2023-03-29T21:39:12Z","last_seen":"2026-07-08T22:53:40.783582Z","times_seen":19,"resource_available":true,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1400,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/custom_script.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/custom_script.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:39 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 622\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"634-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuQlYiakw14o0%2FOMblSYN5z%2F3ToHvNsLlUz4V99VpYo9HJ6ke4c4EOSoiyW1ZDBARzg4pvsdWhfrV7nVJHsk44R0gOlf9fQcC45%2FS2zzVm%2F3nMWQCfwX1P%2B%2BYlUJQPTUBdRQFGY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafb456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1588,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3ebf846f88fa66f8ba04104afbc9a786","sha1":"d82fa2e7df107bc348d8f26b7b2933f452444f77","sha256":"470a1557604a3180023c83e0b90067a2a42f5667dfb2c2a7db2f30e3ef67f62d","sha512":"1276fff4a0092c6cfc8e4dbc39d75669a8fe5eab713e5db2bdb1ba9ebac2796aa6017f72e1e2f3389e8a6781484883a29ab0c38256c8c6ff08bd626bc404a0bf","ssdeep":"","tlshash":"2131ccd1d37d368e0a7134bd092b468c16ac7930e5071eba78711cb009edf39311bd26","first_seen":"2026-03-29T12:25:03.819971Z","last_seen":"2026-03-29T12:25:19.138843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/img/homebg.svg","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:37.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/img/homebg.svg HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:39 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 11:33:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lt2Rl%2B4h7lO7vaOx0LtctDT0h4jwL%2BZGaL47dTrIeKgQpt0DFXup6FsRD2pmiDsCwb2sIacBcR1%2F3LATBwWnw%2Bc3CvQ7EY2enZU%2FMDilxoEhEpQEHmlQhb%2Fuk1t8kZEsloJacd0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"dd99-64c454f4a7cc0\"\r\ncontent-encoding: br\r\ncf-ray: 9e3eda415a2456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56729,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf5f23287bc9f60c9be282fad3c98cb4","sha1":"9747a1e48ab74ee1043da71f804533c464181a6f","sha256":"4fe6d8bb8d5f988620015011f42fee73d629444a913998be40ec24368e5ff687","sha512":"cc389cb28293c39d6e4d649378a7a5a1e2214c28e99a1d27ceb1eb3fff120bfd773591fc02bacc3ab7fce8e09366e08a3b48af971d0abafbe8f822a76c9a55f2","ssdeep":"1536:T6m4BiR+RvxSJiLxE7MTNuMCP1cTKgBVG2fZY13G0Fqk7eyuEt:GmlD","tlshash":"3943a5ace22c6aa7c64dc3fcdbebb4a5214e81da55a0834cc1354f5f1a6848f5c4ef61","first_seen":"2025-09-03T08:59:09.697497Z","last_seen":"2026-08-07T18:34:28.897857Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1976,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/img/favicon.ico","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:39.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/img/favicon.ico HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 13:27:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1sQwyXKvAzdeUYDSfdDLWCdY6%2FDc09c8ZgEoPAke8yYQAq1iQ4b3IeiWW2wfVMp6xeeMMEZNSNJ6f7nll8j1UfEkbkhRjXnD0Gb2ID9JONSWFTwRBkEiqSGRg%2FhOxdEhxh3hi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"47e-64c46e5bc2b80\"\r\ncontent-encoding: br\r\ncf-ray: 9e3eda4e789756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"a2dd4bc2b07b1f771705ad0801d6d0ad","sha1":"cc8f57e87a1c3b7f7b2046ecf5f5146c4b5ac1e0","sha256":"18198f67f4b01bdc06111f9a7aa42828752ff7d4e7d08782d107420a4ca5e870","sha512":"ae07fe92ead17ae90fa0c38992020bdb454343207102ba0f91d0f4f2709422f6b6f7fbb5bed99e6bf5cdd9c3b265b4cc5f47e28dd0d1defd99b36284f4ba61a4","ssdeep":"","tlshash":"3221dc4298484c0efc2528fa906837d16ed1d997bbd6fa50de07ae40673742c93d7563","first_seen":"2026-03-29T12:25:03.824296Z","last_seen":"2026-03-29T12:25:19.151564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/css/iofrm-style.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/css/iofrm-style.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 6050\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"a8e4-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BghCj%2BgEz1GlpOyiTTfM5Lgk00EkTQkRkO3v7clve1MVRkz00T%2FOUG15%2FaxzLLGF9gQDi%2BJff3xNDAxhiwBizGVdm8BhCt78%2Bu7dLxCG1Uz7KplvgKCu%2FRMRLvcw%2BsasCtq86I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3e8f8756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43236,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"391f3a3671daf3c74df8ac3a9dbcb692","sha1":"f9f19eca00151671d0205d1f4611ba9cb28cc9ca","sha256":"124395b61183369e4cbe7222026b8cec2c9682bcd54d120b182a2e0bb1ad9e72","sha512":"550ac59559464f8376ad1d2bd5d91fdcaec1335edaaf5d515cd36ed892e36ce0fcf3abe0efc2e0ebd0e833789c5876aa42b3e6a0fd43013616060b55bb7fec54","ssdeep":"384:XCFRFQFtFAYFNPf8uQkqYu3oe0bIhYdFp4mkxy:XCFRFQFtFAYFNcsFR","tlshash":"49132f698d730601727bcd1887dab6c1622d8063854eedfd72c625cc8fcda9490abbcd","first_seen":"2026-03-29T12:25:03.826218Z","last_seen":"2026-03-29T12:25:19.14671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/general/css/tw-output.css","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/general/css/tw-output.css HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Eu0kPAPcW3n8k6VGd%2B8p366yAxtlwX7IrJuMMvJlAWtO0FPlpZoL0TiA1oxWzrOf70PJMaUb%2FNDeAyt%2FSv%2F1D%2BOFdPvDZRf9KSBqfj273FH%2Bt%2Fo%2FtGL4z4niG4yRAsPEByzPvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3eda3e9f8a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fc10f358967a59750ef6fd9a698e2d60","sha1":"3fc472d167c41a4193625aff84ee6e599b302002","sha256":"16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2","sha512":"9664693058cb0573a00cb8497bd5866f523fed0553a51417caaea300dbbed793f9fe2fb1b06a946284c2c4769f888a8ea9e7789c3d143398d5ae9b2a7735eb71","ssdeep":"","tlshash":"1f21ee1fe641194bf25e0064bfe1eb472b1f2167e85c4f713a69e029c2990f568632cc","first_seen":"2023-03-09T10:43:16Z","last_seen":"2026-08-17T17:30:01.231312Z","times_seen":3118,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/jquery.min.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/jquery.min.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 36253\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"23a8f-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nn2pAgWlYU%2BvbLioiZ%2BZ14iOOEuJJgChxMpJJ0Wy2Hh8hI9JPMdfuM1qCjDxOFW5gUSe3dUk2uD6hNG3QuSwKpIN%2FZw9soz0vIWNQg3IMgCvd%2Fnn77TYKJbDEOVsKtKmIlSfWm8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafa956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146063,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (522)","md5":"8be9cef8a4f454be76c10e60deaf6244","sha1":"193972ed6a0d264946a38075d465ce1ad4c3b389","sha256":"f3bf1dfc30c3d03223733bf3f8db208eac938252d5bd7fcd67443e3868815066","sha512":"b9a5d940526e32800083791129719aae2d90a2daf9a7004f425b9785b88e11e524c549f728e6ed10b0c7bed50f5cc7abe78fff2db487fcf062155822eec4084c","ssdeep":"3072:nppclgk+FTk4XdMdz9lWJUXVoyvf3B5VU3rs4bse:ppcQFTdMdz9lWJUXhvvB+rPbse","tlshash":"3de35199bae621319207f03e9e6fc808b236544f2a8ded057d0c51a55f1493c97fafe8","first_seen":"2023-03-07T12:59:21Z","last_seen":"2026-08-10T18:41:09.149159Z","times_seen":301,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teams-meeting.info/assets/admin/login/js/main.js","fqdn":"teams-meeting.info","domain":"teams-meeting.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:36.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teams-meeting.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 16:15:18 GMT","end":"Thu, 25 Jun 2026 16:15:17 GMT"},"fingerprint":{"sha1":"07:DF:FB:42:33:3E:A5:82:40:87:B8:56:9C:50:16:BD:0F:1C:49:A2","sha256":"D5:A5:FF:E0:9B:01:EC:86:1E:DA:C1:F6:40:16:2D:95:77:9C:FE:B6:4A:EA:65:55:A3:F9:EC:15:E6:C4:D3:B4"}}},"request":{"raw":"GET /assets/admin/login/js/main.js HTTP/1.1\r\nHost: teams-meeting.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/admin_login\r\nCookie: ci_session=foejkqv3tenntbsk0r6t52n0tmcevrsp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 429\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Nov 2024 09:47:14 GMT\r\netag: \"3bb-6277d44818c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqNFIS0%2FpOpGtTbM0pBPiE66R7Zckei1VDbT4zRyd3A%2BYnyX1OBLeiMDAX0%2FoZitJ6eFM7zIWW5hv2gm%2F%2BR0C3LRxp6CER%2FQOOF4DLceShbXGB4ak57o%2BcweyCr4Q1ZeeAIhY9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3eda3eafb256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c8b00a540cf10daa84d5ced6c016b96d","sha1":"7b2e1bc09e305f8568d252d8a367b44d7961880e","sha256":"0d0460d581ffc10ad33ae9b000b5f9530e1995f2420a0e8f5ef2d56054ab3ce4","sha512":"b6e806f4b981bc1fa5605c0249c2179155c79e1bb37f15ebc2f8825bf768bf8acb2564f0766f8b0b1c5acdfb096a9c102e3b69a0b31259bb3c724430eb77b2df","ssdeep":"","tlshash":"3a11590978fa54b611b7707b56bb54400a1a015f8319cf42f65c0dd12f9550aaff0b5a","first_seen":"2026-03-29T12:25:03.830027Z","last_seen":"2026-03-29T12:25:19.148753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"teams-meeting.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito+Sans:wght@300;400;600;700\u0026family=Poppins:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teams-meeting.info/admin_login","date":"2026-03-29T12:24:37.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Nunito+Sans:wght@300;400;600;700\u0026family=Poppins:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teams-meeting.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 29 Mar 2026 12:24:37 GMT\r\ndate: Sun, 29 Mar 2026 12:24:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16438,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4070bb7e4150035c9d082183c7e85b78","sha1":"da53465765797bd745b3743c16f81c99d94f8b17","sha256":"ebc71e57ca069d4e77a4277426632b0b66867cfc360ae56ea9ac65c3ae6d84d3","sha512":"8545c287eb7443d5b6e057d372bd1b5da8111ca42c9dc57433a9292338e6cbb1884ea1159e261069d28604ea55624a8dfe350b6a2998c7bb9a519618535b5b5e","ssdeep":"384:t3dKwkJvS3AKNJkv43aKjfevH35KEQtvr:tNLkJvSwyJkv4KYfevHpnQtvr","tlshash":"9772ff90043ba454db436cc233cfbe36af1ea1517415d439abfd0898acabc6a5326b1d","first_seen":"2025-10-09T12:54:33.554432Z","last_seen":"2026-07-17T22:37:33.067567Z","times_seen":24,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":56,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}