URL User Request GET HTTP/2IP 188.114.96.1:443
CertificateIssuerLet's Encrypt Subjecto365-2hl.pages.dev Fingerprint50:10:C7:41:5E:91:8C:3B:FB:3B:DF:2F:E9:2B:F3:16:57:8C:20:2D ValidityWed, 27 Mar 2024 08:09:19 GMT - Tue, 25 Jun 2024 08:09:18 GMT
File typeHTML document, ASCII text, with very long lines (717), with no line terminators Hashabf2343e0ed1d104b33f324ca2f33913 e5f400e13c288478d71400b5964e0ba56569b310 749aac2da49e02ab0eda7204691c12a5bf4f363660bbfaba33d1201f3b4781dc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET / HTTP/1.1
Host: o365-2hl.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 23:26:43 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f9cbddb18a1aa0a53f38c9748f5f04de"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yo9GvNun%2F%2F8xySjvkG1zNfvSNNckPpXPyZOZX3yW1AxSbxGvrrxJPI7eodLRAEPyabrNuHFLljJNOPZ2e2VhrSm6ZRHBwaDOr3MCkYdwGFH7aJuMLtUBHGeM%2BJNcO06HXJ6zbyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880d37610971b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| o365-2hl.pages.dev/favicon.ico | 188.114.96.1 | 200 OK | 657 B |
URL GET HTTP/3o365-2hl.pages.dev/favicon.ico IP188.114.96.1:443
Requested byhttps://o365-2hl.pages.dev/ CertificateIssuerLet's Encrypt Subjecto365-2hl.pages.dev Fingerprint50:10:C7:41:5E:91:8C:3B:FB:3B:DF:2F:E9:2B:F3:16:57:8C:20:2D ValidityWed, 27 Mar 2024 08:09:19 GMT - Tue, 25 Jun 2024 08:09:18 GMT
File typeHTML document, ASCII text, with very long lines (717), with no line terminators Hashabf2343e0ed1d104b33f324ca2f33913 e5f400e13c288478d71400b5964e0ba56569b310 749aac2da49e02ab0eda7204691c12a5bf4f363660bbfaba33d1201f3b4781dc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /favicon.ico HTTP/1.1
Host: o365-2hl.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://o365-2hl.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:26:43 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f9cbddb18a1aa0a53f38c9748f5f04de"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oDG5TKw9H2%2Fc%2Fk4EHVtttCljz9tOcyiep1ixa1IZHY72B7iM29pSFU4VLtMGkQDt24LQ1voxdtFCDGGm6NsgpzGjyDvs9bv9ht8hdBgdLpFn4NguGJcTWyW4Zv4bU5r1jg8ZhfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880d3763f80756ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|