res.cdn.office.net/owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js
8.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js
IP
File type ASCII text, with very long lines (26124), with no line terminators
Hash 8ecba5b57238a03539e8b8a1a46d7057
4e9d57d23c34712931664bc240cdafdaf8491006
074eec818498f0a60598c5be45b0c44d2a1879f8827ca60574d3b334d077445e
GET /owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:29:37 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=720940314652371664310148272338537088566"}],"include_subdomains ":true}
server: ECAcc (ska/F685)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: fa180efc-b01e-0059-0da3-274d42000000
content-length: 8533
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.309598.m.991c83be.js
3.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.309598.m.991c83be.js
IP
File type ASCII text, with very long lines (10683), with no line terminators
Hash 89554c4211fa4f764bc2bd2b29b25325
a86ca12df068850b7eb87b3678bd76cba12b629a
91f938607b79f5b06adfa96a7465975231d1b4e8ef408af27b5e6c9decaca698
GET /owamail/hashed-v1/scripts/owa.309598.m.991c83be.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 396010
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Wed, 22 Nov 2023 15:49:17 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=49254787245408562586321988095758878131"}],"include_subdomains ":true}
server: ECAcc (ska/F7B4)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8a4dd121-901e-005e-272d-292121000000
content-length: 3489
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.mail.runtime.388cf4f1.js
254 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.mail.runtime.388cf4f1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 254 kB (254232 bytes)
Hash 50ed640d60fd65472d7f7516e1a7a678
ad13fab20d10fcfd0d072970b79f93f6cc885b03
05256837bce09bd2b853131c6524a73899d6ee4f20a0b7ed8a4e63512dff9851
GET /owamail/hashed-v1/scripts/owa.mail.runtime.388cf4f1.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 367428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Thu, 07 Dec 2023 22:02:02 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=303234148594693042610419368659116619967"}],"include_subdomains ":true}
server: ECAcc (ska/F764)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 089484d3-701e-001b-606f-29f4c2000000
content-length: 254232
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js
2.8 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js
IP
File type ASCII text, with very long lines (8712), with no line terminators
Hash aa54a896b633bf096fbd44593756c285
61b65ff131e79c713f68d501c1222f20bfbc5f9b
2f449c18789bb85e46c007827e77d6f272e61822d90d7171b0e7595074438a88
GET /owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:30:04 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=138723342516464899982959820739186778096"}],"include_subdomains ":true}
server: ECAcc (ska/F68B)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 250fd70a-301e-001a-3da3-27ab1e000000
content-length: 2843
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.956337.m.2acdde36.js
4.3 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.956337.m.2acdde36.js
IP
File type ASCII text, with very long lines (13139), with no line terminators
Hash 0c04e7a7062eadd1269df6ab00efb67f
b85ed381266f1f1961b70a89c5fa8ab5206c7522
d875a9df9b340edea7454e25bf1a6ac5f2f77f24c6f82df1d94c77ae1ab2061f
GET /owamail/hashed-v1/scripts/owa.956337.m.2acdde36.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:28:55 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=40772701570474861507873899337388654099"}],"include_subdomains ":true}
server: ECAcc (ska/F7B9)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 807791a1-e01e-0054-21a3-278596000000
content-length: 4331
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.436856.m.1f621d3b.js
2.8 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.436856.m.1f621d3b.js
IP
File type ASCII text, with very long lines (9046), with no line terminators
Hash 99ddf62021f85ee35e3dfecdf523c54d
28e5b55a5b9881896548067c62818ec4e5ae6b71
12f6b221e1ba6ded6493ac3bff78535c54b17a68ec4f75347c71a5b8aeed28e1
GET /owamail/hashed-v1/scripts/owa.436856.m.1f621d3b.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:29:03 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=70606102993173796011117679894717937157"}],"include_subdomains ":true}
server: ECAcc (ska/F69F)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: acd47cec-001e-003e-37a3-275dbe000000
content-length: 2816
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js
16 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js
IP
File type ASCII text, with very long lines (60540), with no line terminators
Hash 57705dff5e3196a23ed1de4009100607
d78b29bd9f721084af47ca5fa1078e0f055e928c
c93dd27606e683013ad5f00028876fc51532f896af8135cd64128bab240ef1a7
GET /owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:30:03 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=121129352992200344306721645112312693880"}],"include_subdomains ":true}
server: ECAcc (ska/F6D1)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8d2e3898-e01e-0036-53a3-2747b1000000
content-length: 15466
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.524889.m.a2963223.js
7.1 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.524889.m.a2963223.js
IP
File type ASCII text, with very long lines (34255), with no line terminators
Hash 47f17aae77dedecf5fa5f42ac4ee5ade
140ad97baa21a69f1c68be6b87cc9d9cfff68463
5ded65c88ef8920781e6850eb0d156f66ccc71480bb14c92d8d060fb85d8f916
GET /owamail/hashed-v1/scripts/owa.524889.m.a2963223.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 310471
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Fri, 01 Dec 2023 15:22:33 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=69492888463410975911291122970060953248"}],"include_subdomains ":true}
server: ECAcc (ska/F764)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 20ca3da6-201e-004b-6cf4-293692000000
content-length: 7141
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js
2.3 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js
IP
File type ASCII text, with very long lines (7806), with no line terminators
Hash 4299cb777fb681a860930e2cde0c44bd
10b9f4155aa74078e90c9b61e2914ea0431aaeb0
addde1e421532be6eb516eb29d5451321f7f43a178b90dd4a9806d78e28fba2a
GET /owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:28:48 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=6027648711954368607278200930274691591"}],"include_subdomains ":true}
server: ECAcc (ska/F6A8)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: f1030575-a01e-0027-60a3-27dd05000000
content-length: 2286
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.862600.m.b6051870.js
3.0 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.862600.m.b6051870.js
IP
File type ASCII text, with very long lines (10517), with no line terminators
Hash 10dac8f5ac8bbf7b02faf053cd947eb1
f7e24dbec3bbb6a371dc11f22fda723b1c2ea819
0b12430bfc8fd217cde05b88045bb1b81bca0664b498e4aa4db34dd3386edc13
GET /owamail/hashed-v1/scripts/owa.862600.m.b6051870.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:29:44 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=693185074940021276616250745468783137238"}],"include_subdomains ":true}
server: ECAcc (ska/F76D)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 3fb5cf76-401e-003f-70a3-270262000000
content-length: 2963
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.782831.m.7af29eb9.js
7.4 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.782831.m.7af29eb9.js
IP
File type ASCII text, with very long lines (29132), with no line terminators
Hash ca337272af06d401078f987a62844b60
8aa80dc3c1d09e8940273db00665ded9cad585c0
f7029b02c3a03422d401b8b40603e9611487e3092c72e749ce0cf18cb6d1c0bf
GET /owamail/hashed-v1/scripts/owa.782831.m.7af29eb9.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 48480
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 30 Oct 2023 14:29:21 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=801292555875556043714859165033295675789"}],"include_subdomains ":true}
server: ECAcc (ska/F695)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 554d2551-001e-003e-2456-2c5dbe000000
content-length: 7435
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js
2.7 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js
IP
File type ASCII text, with very long lines (9838), with no line terminators
Hash d62c03894805ac42479911c9cb3549d9
9d0faecced94739a2450edf9e9c685d84c5bd033
1906448176ba00f58bc164f1a30989cca1058158463969c0e2a83e12bcc39ca8
GET /owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:28:46 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1740663392634695485816390618452073737709"}],"include_subdomains ":true}
server: ECAcc (ska/F6F5)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 25c2b029-101e-001d-19a3-27c77d000000
content-length: 2663
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js
8.3 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js
IP
File type ASCII text, with very long lines (29596), with no line terminators
Hash 4806ddcc31dae40003ac2a528195394d
1c0e51518fe737dc5cb73daccb0a74e20ca6c5d5
a1ab3ef3d8d3f4e2239b851dfe4aa2d59395ee30429d440869094ffdf63a93c1
GET /owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 310471
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Fri, 01 Dec 2023 15:22:39 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=180921275005583690616931243014465016005"}],"include_subdomains ":true}
server: ECAcc (ska/F74E)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 0d31f065-f01e-0058-2df4-29129e000000
content-length: 8284
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.200031.m.79360593.js
1.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.200031.m.79360593.js
IP
File type ASCII text, with very long lines (4592), with no line terminators
Hash a531902ee47f81e3d63d7c81d614c1e7
fdc0f721a4c9569fb347767428565b94f0a7522b
825963a49bce016bb94cae72cc07f551e7722f6fe19cc6a625724fdf52b77190
GET /owamail/hashed-v1/scripts/owa.200031.m.79360593.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:29:50 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=574981607773316697713993234956469221142"}],"include_subdomains ":true}
server: ECAcc (ska/F6A9)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 26981fa9-b01e-002b-0ba3-274a0d000000
content-length: 1534
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.452772.m.89d03883.js
7.1 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.452772.m.89d03883.js
IP
File type ASCII text, with very long lines (26589), with no line terminators
Hash 89e8e7da34a29c37adfcbdffdccaeee6
c56e6836326c6c9ed98d328628cb9cfb81805b5f
389513c2163c706a48bbf89bd5e1f57f33d3e272aa721bcd6089c7c741cd761f
GET /owamail/hashed-v1/scripts/owa.452772.m.89d03883.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 479902
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Wed, 29 Nov 2023 15:29:43 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=16392937393319898311852189133840462284"}],"include_subdomains ":true}
server: ECAcc (ska/F69A)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8bf28aba-001e-0073-3a69-289252000000
content-length: 7116
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.344953.m.5133b132.js
2.9 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.344953.m.5133b132.js
IP
File type ASCII text, with very long lines (8197), with no line terminators
Hash 85018e06e296ccc0af50439441c16785
b0821e026bdea82191f45e1e23c937ff2d5b50f2
80e16b07f9139b45b1117794a529c9db258d5bdc0ad7e480408d9aa4b6aaaa45
GET /owamail/hashed-v1/scripts/owa.344953.m.5133b132.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:30:05 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=35371830186445118915009151450152556815"}],"include_subdomains ":true}
server: ECAcc (ska/F72D)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 58ca5bb0-b01e-0004-63a3-2747c6000000
content-length: 2894
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.9986b597.css
18 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.9986b597.css
IP
File type Unicode text, UTF-8 text, with very long lines (65502), with no line terminators
Hash 9a70e9765d51fd39c796ab4680e0124e
4a549efa50ac62aa7d9593120c4d55010ddeb855
6e5f0139eda51461152143fc08dd561ed6dc27f37a3ef621eb4fff12791830fc
GET /owamail/hashed-v1/scripts/owa.MailBoot.m.9986b597.css HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 395882
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: text/css
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Thu, 30 Nov 2023 15:29:35 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=233008265433677950515971514359647572047"}],"include_subdomains ":true}
server: ECAcc (ska/F691)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 9db10d5c-701e-0056-1f2d-293b2e000000
content-length: 17779
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js
744 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js
IP
File type ASCII text, with very long lines (65455)
Size 744 kB (744291 bytes)
Hash 9ff8b5c0d279c754d91c94c0d7dc0eaf
803ba56f5b3c6ac045572e70260838d0212a44da
d25631e2cb65a4ac30ade8f2267deeae13035d52863b4b9e66c5178910069516
GET /owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 367385
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Thu, 07 Dec 2023 22:02:10 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1629201013885045437918004860551415132284"}],"include_subdomains ":true}
server: ECAcc (ska/F75B)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: c01effe8-401e-0062-306f-2908e6000000
content-length: 744291
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.mailindex.ff6fb3a3.js
60 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.mailindex.ff6fb3a3.js
IP
File type Unicode text, UTF-8 text, with very long lines (65454)
Hash b1dbd4b05aaa3f829dedaef35e3506a1
200cfe8269f486b279dbc08d4c7b2c57eafab899
1a954282a0b117bf332042bb6d6e970006f62cd9048257d5898e25d482eb3afb
GET /owamail/hashed-v1/scripts/owa.mailindex.ff6fb3a3.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 307557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Fri, 01 Dec 2023 15:22:11 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=174879385917405729966704975265108248666"}],"include_subdomains ":true}
server: ECAcc (ska/F688)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: a2e95f94-301e-0068-07fb-29ac51000000
content-length: 59736
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js
65 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js
IP
File type ASCII text, with very long lines (65447)
Hash e52d336703e58bbad2c331559def9ada
bf711ff9ca3d83f98b0baa3d020123647179848b
bdf87cb99e9911abf7b6ac8b62fb81551c87ed24c5f794acc0e2a78fdcfbc046
GET /owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 50008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 13 Nov 2023 15:53:10 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=82443327528550092891869484913546090930"}],"include_subdomains ":true}
server: ECAcc (ska/F698)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 39e85be5-e01e-0009-2652-2c8f12000000
content-length: 64844
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.fluent.m.7dba3156.js
41 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.fluent.m.7dba3156.js
IP
File type ASCII text, with very long lines (65453)
Hash f8dbd44aa8684791f4ecbbc3d0bbe966
215537f837f93a8411a2ff373b41e56ac0eeeec6
ceac6b5f2968d633d90a387d3fb51d0cc0a48a09a0f2954555d5a1caa621a9b7
GET /owamail/hashed-v1/scripts/owa.ven.fluent.m.7dba3156.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565056
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:28:51 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=68790041999195307975176551958079671943"}],"include_subdomains ":true}
server: ECAcc (ska/F6C4)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: f103d612-a01e-0027-1da3-27dd05000000
content-length: 40623
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.fluentIcons.m.7dbe9ebb.js
11 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.fluentIcons.m.7dbe9ebb.js
IP
File type Unicode text, UTF-8 text, with very long lines (50474), with no line terminators
Hash 5cf90b38163824e2851a521d4d9f27db
0d6364ba49649eef07cbce76e57fa7c08c2053c8
6678cc3905955a4a763e1221ad4db52f91cff94ceaadabcf2c501281a8fe480d
GET /owamail/hashed-v1/scripts/owa.ven.fluentIcons.m.7dbe9ebb.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 310474
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Fri, 01 Dec 2023 15:21:57 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=34062097827229703649665633496235169179"}],"include_subdomains ":true}
server: ECAcc (ska/F72C)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: d96aeff1-b01e-0059-42f4-294d42000000
content-length: 11282
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js
83 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 39a0cc2f3ac14a2c8bd59ba298f4b8f0
d9c84941dc148cf9a500093031156fdbce136a0e
fe2788b26699ac7f5b2e9cb57e9a8b4f323c06333c080f8c4a7f7fb76149a86a
GET /owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Mon, 23 Oct 2023 18:30:04 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=41926051173921591242603365245679551140"}],"include_subdomains ":true}
server: ECAcc (ska/F778)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 34cd711e-801e-0020-69a3-27b166000000
content-length: 82654
X-Firefox-Spdy: h2
res.cdn.office.net/assets/framework/microsoft.svg
1.3 kB URL res.cdn.office.net/assets/framework/microsoft.svg
IP
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (2540), with CRLF line terminators
Hash 7d2b8f25545a2894e2721e9fe528e34c
d0dae76f4bf5c04acd5fcdf1bcb12908099e328c
797bda35d13e5130fe5a14e0069c31b46ec1af6ea47f2d300309803bb4d2608c
GET /assets/framework/microsoft.svg HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 54900
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: image/svg+xml
date: Tue, 12 Dec 2023 06:49:02 GMT
last-modified: Wed, 30 Aug 2023 00:31:42 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1514133776562838370015884870850671475955"}],"include_subdomains ":true}
server: ECAcc (ska/F6C8)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-ms-request-id: 484a4d8d-701e-0046-4747-2cfe46000000
content-length: 1267
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js
65 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js
IP
File type ASCII text, with very long lines (65447)
Hash e52d336703e58bbad2c331559def9ada
bf711ff9ca3d83f98b0baa3d020123647179848b
bdf87cb99e9911abf7b6ac8b62fb81551c87ed24c5f794acc0e2a78fdcfbc046
GET /owamail/hashed-v1/scripts/owa.ven.extframework.m.4e273278.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 50009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 13 Nov 2023 15:53:10 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=175865446860219895617171374552937329968"}],"include_subdomains ":true}
server: ECAcc (ska/F698)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 39e85be5-e01e-0009-2652-2c8f12000000
content-length: 64844
X-Firefox-Spdy: h2
outlook.office.com/owa/startupdata.ashx?app=Mail&n=0
0 B URL outlook.office.com/owa/startupdata.ashx?app=Mail&n=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /owa/startupdata.ashx?app=Mail&n=0 HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
action: StartupData
ms-cv: e57n8Q6bf1cJ4EdX4kw2U2.0
prefer: exchange.behavior="IncludeThirdPartyOnlineMeetingProviders"
x-js-experiment: 5
x-message-count: 44
x-owa-bootflights: localStorageOwaPrefix,fwk-analytics-addons,cal-getTimeZoneOffsetsV2,acctPersistenceSourceIdV2,dev-offlineMultiAccountDB,auth-getAuthTokenV2,cal-publishedCalendarV2
x-owa-canary: X-OWA-CANARY_cookie_is_null_or_empty
x-owa-correlationid: accountPolicy_95d4a23e-895d-e9bc-f0bb-ce023eb7b88f
x-owa-hosted-ux: false
x-owa-sessionid: 1dd46292-2789-47b1-a35f-e6e811bcd98e
x-req-source: Mail
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Cookie: ClientId=2456F1837CA2431E8FB23C96999E7A97
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 401 Unauthorized
server: Microsoft-IIS/10.0
request-id: 740745c3-4821-47a7-5675-daab9fc15ab6
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
x-calculatedbetarget: GVYP280MB1103.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 401
set-cookie: OIDC=1; expires=Wed, 12-Jun-2024 06:49:03 GMT; path=/;SameSite=None; secure; HttpOnly
RoutingKeyCookie=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
HostSwitchPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OptInPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
www-authenticate: Bearer client_id="00000002-0000-0ff1-ce00-000000000000", trusted_issuers="00000001-0000-0000-c000-000000000000@*", token_types="app_asserted_user_v1 service_asserted_app_v1", authorization_uri="https://login.microsoftonline.com/common/oauth2/authorize"
x-rum-validated: 1
x-rum-notupdatequeriedpath: 1
x-rum-notupdatequerieddbcopy: 1
x-owa-dag: SWEP280DG081
x-owa-forest: SWEP280.PROD.OUTLOOK.COM
x-content-type-options: nosniff
x-besku: WCS7
x-owa-diagnosticsinfo: 0;0;0
x-iids: 0
x-owa-correlationid: accountPolicy_95d4a23e-895d-e9bc-f0bb-ce023eb7b88f
x-backend-begin: 2023-12-12T06:49:03.259
x-backend-end: 2023-12-12T06:49:03.259
x-diaginfo: GVYP280MB1103
x-beserver: GVYP280MB1103
x-ua-compatible: IE=EmulateIE7
x-proxy-routingcorrectness: 1
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=GVX&RemoteIP=91.90.42.0"}],"include_subdomains":true}
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-proxy-backendserverstatus: 401
x-firsthopcafeefz: GVX
x-feproxyinfo: GVX0EPF0000FA88.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
x-feserver: GVX0EPF0000FA88
date: Tue, 12 Dec 2023 06:49:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js
8.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js
IP
File type ASCII text, with very long lines (26124), with no line terminators
Hash 8ecba5b57238a03539e8b8a1a46d7057
4e9d57d23c34712931664bc240cdafdaf8491006
074eec818498f0a60598c5be45b0c44d2a1879f8827ca60574d3b334d077445e
GET /owamail/hashed-v1/scripts/owa.16025.m.09e2058f.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:29:37 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=178125932054692365651722021349558655565"}],"include_subdomains ":true}
server: ECAcc (ska/F685)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: fa180efc-b01e-0059-0da3-274d42000000
content-length: 8533
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js
2.8 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js
IP
File type ASCII text, with very long lines (8712), with no line terminators
Hash aa54a896b633bf096fbd44593756c285
61b65ff131e79c713f68d501c1222f20bfbc5f9b
2f449c18789bb85e46c007827e77d6f272e61822d90d7171b0e7595074438a88
GET /owamail/hashed-v1/scripts/owa.342106.m.e001a04a.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:30:04 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=27213549144640952891913816773471203655"}],"include_subdomains ":true}
server: ECAcc (ska/F68B)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 250fd70a-301e-001a-3da3-27ab1e000000
content-length: 2843
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.452772.m.89d03883.js
7.1 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.452772.m.89d03883.js
IP
File type ASCII text, with very long lines (26589), with no line terminators
Hash 89e8e7da34a29c37adfcbdffdccaeee6
c56e6836326c6c9ed98d328628cb9cfb81805b5f
389513c2163c706a48bbf89bd5e1f57f33d3e272aa721bcd6089c7c741cd761f
GET /owamail/hashed-v1/scripts/owa.452772.m.89d03883.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 479903
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Wed, 29 Nov 2023 15:29:43 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=98112578542234003172401287274914133125"}],"include_subdomains ":true}
server: ECAcc (ska/F69A)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8bf28aba-001e-0073-3a69-289252000000
content-length: 7116
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js
2.3 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js
IP
File type ASCII text, with very long lines (7806), with no line terminators
Hash 4299cb777fb681a860930e2cde0c44bd
10b9f4155aa74078e90c9b61e2914ea0431aaeb0
addde1e421532be6eb516eb29d5451321f7f43a178b90dd4a9806d78e28fba2a
GET /owamail/hashed-v1/scripts/owa.807402.m.8814b9e9.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:28:48 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=127073458357052359116628854806787586857"}],"include_subdomains ":true}
server: ECAcc (ska/F6A8)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: f1030575-a01e-0027-60a3-27dd05000000
content-length: 2286
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js
16 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js
IP
File type ASCII text, with very long lines (60540), with no line terminators
Hash 57705dff5e3196a23ed1de4009100607
d78b29bd9f721084af47ca5fa1078e0f055e928c
c93dd27606e683013ad5f00028876fc51532f896af8135cd64128bab240ef1a7
GET /owamail/hashed-v1/scripts/owa.18838.m.cea8e7d1.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:30:03 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=82706109038849812481202926456040096129"}],"include_subdomains ":true}
server: ECAcc (ska/F6D1)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8d2e3898-e01e-0036-53a3-2747b1000000
content-length: 15466
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.344953.m.5133b132.js
2.9 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.344953.m.5133b132.js
IP
File type ASCII text, with very long lines (8197), with no line terminators
Hash 85018e06e296ccc0af50439441c16785
b0821e026bdea82191f45e1e23c937ff2d5b50f2
80e16b07f9139b45b1117794a529c9db258d5bdc0ad7e480408d9aa4b6aaaa45
GET /owamail/hashed-v1/scripts/owa.344953.m.5133b132.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:30:05 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=203786659722109537515748417200210235453"}],"include_subdomains ":true}
server: ECAcc (ska/F72D)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 58ca5bb0-b01e-0004-63a3-2747c6000000
content-length: 2894
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js
2.7 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js
IP
File type ASCII text, with very long lines (9838), with no line terminators
Hash d62c03894805ac42479911c9cb3549d9
9d0faecced94739a2450edf9e9c685d84c5bd033
1906448176ba00f58bc164f1a30989cca1058158463969c0e2a83e12bcc39ca8
GET /owamail/hashed-v1/scripts/owa.348139.m.1262ee75.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:28:46 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=104368057438388320287532241743882704904"}],"include_subdomains ":true}
server: ECAcc (ska/F6F5)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 25c2b029-101e-001d-19a3-27c77d000000
content-length: 2663
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.200031.m.79360593.js
1.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.200031.m.79360593.js
IP
File type ASCII text, with very long lines (4592), with no line terminators
Hash a531902ee47f81e3d63d7c81d614c1e7
fdc0f721a4c9569fb347767428565b94f0a7522b
825963a49bce016bb94cae72cc07f551e7722f6fe19cc6a625724fdf52b77190
GET /owamail/hashed-v1/scripts/owa.200031.m.79360593.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:29:50 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1666544891121666850510387960408781653938"}],"include_subdomains ":true}
server: ECAcc (ska/F6A9)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 26981fa9-b01e-002b-0ba3-274a0d000000
content-length: 1534
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.862600.m.b6051870.js
3.0 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.862600.m.b6051870.js
IP
File type ASCII text, with very long lines (10517), with no line terminators
Hash 10dac8f5ac8bbf7b02faf053cd947eb1
f7e24dbec3bbb6a371dc11f22fda723b1c2ea819
0b12430bfc8fd217cde05b88045bb1b81bca0664b498e4aa4db34dd3386edc13
GET /owamail/hashed-v1/scripts/owa.862600.m.b6051870.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:29:44 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=140631620810021303206922189870334828441"}],"include_subdomains ":true}
server: ECAcc (ska/F76D)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 3fb5cf76-401e-003f-70a3-270262000000
content-length: 2963
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/20231201002.05/resources/analytics-ping.js
34 B URL res.cdn.office.net/owamail/20231201002.05/resources/analytics-ping.js
IP
File type ASCII text, with no line terminators
Hash 37886d0a0cf1ab5695277ac2daba488f
2c921a9fbfefbe4598bda170d0e954a83650e77e
d185159b6a77cd02ed536f44197af7913ecfd6fd264b113eac65fce9a97482f5
GET /owamail/20231201002.05/resources/analytics-ping.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 368446
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Thu, 07 Dec 2023 22:01:53 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=815374005443104395416996611912857866416"}],"include_subdomains ":true}
server: ECAcc (ska/F7B0)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: b3338605-301e-0035-016d-29a6d5000000
content-length: 34
res.cdn.office.net/owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js
8.3 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js
IP
File type ASCII text, with very long lines (29596), with no line terminators
Hash 4806ddcc31dae40003ac2a528195394d
1c0e51518fe737dc5cb73daccb0a74e20ca6c5d5
a1ab3ef3d8d3f4e2239b851dfe4aa2d59395ee30429d440869094ffdf63a93c1
GET /owamail/hashed-v1/scripts/owa.191538.m.cd623e2e.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 310472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Fri, 01 Dec 2023 15:22:39 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=347677653665883623017124590314472856819"}],"include_subdomains ":true}
server: ECAcc (ska/F74E)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 0d31f065-f01e-0058-2df4-29129e000000
content-length: 8284
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js
83 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 39a0cc2f3ac14a2c8bd59ba298f4b8f0
d9c84941dc148cf9a500093031156fdbce136a0e
fe2788b26699ac7f5b2e9cb57e9a8b4f323c06333c080f8c4a7f7fb76149a86a
GET /owamail/hashed-v1/scripts/owa.ven.graphql.m.997808d6.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 565134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Mon, 23 Oct 2023 18:30:04 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=78070688233873996856347930156985390774"}],"include_subdomains ":true}
server: ECAcc (ska/F778)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 34cd711e-801e-0020-69a3-27b166000000
content-length: 82654
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.309598.m.991c83be.js
3.5 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.309598.m.991c83be.js
IP
File type ASCII text, with very long lines (10683), with no line terminators
Hash 89554c4211fa4f764bc2bd2b29b25325
a86ca12df068850b7eb87b3678bd76cba12b629a
91f938607b79f5b06adfa96a7465975231d1b4e8ef408af27b5e6c9decaca698
GET /owamail/hashed-v1/scripts/owa.309598.m.991c83be.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 396011
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Wed, 22 Nov 2023 15:49:17 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1111640241309816767012171123313488828404"}],"include_subdomains ":true}
server: ECAcc (ska/F7B4)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 8a4dd121-901e-005e-272d-292121000000
content-length: 3489
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js
744 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js
IP
File type ASCII text, with very long lines (65455)
Size 744 kB (744291 bytes)
Hash 9ff8b5c0d279c754d91c94c0d7dc0eaf
803ba56f5b3c6ac045572e70260838d0212a44da
d25631e2cb65a4ac30ade8f2267deeae13035d52863b4b9e66c5178910069516
GET /owamail/hashed-v1/scripts/owa.MailBoot.m.7dbbe83a.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 367386
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Thu, 07 Dec 2023 22:02:10 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=1136130233038926980512241966435828337036"}],"include_subdomains ":true}
server: ECAcc (ska/F75B)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: c01effe8-401e-0062-306f-2908e6000000
content-length: 744291
X-Firefox-Spdy: h2
outlook.office.com/mail/?authRedirect=true&state=0
302 Found 0 B URL User Request GET HTTP/2 outlook.office.com/mail/?authRedirect=true&state=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectoutlook.com
Fingerprint36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09
ValidityTue, 31 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mail/?authRedirect=true&state=0 HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ClientId=2456F1837CA2431E8FB23C96999E7A97; OIDC=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
expires: -1
location: https://outlook.office.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8
server: Microsoft-IIS/10.0
request-id: 232a073b-9625-2161-8816-8b43114ba60d
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
x-preferredroutingkeydiagnostics: 0
x-calculatedbetarget: GVYP280MB0079.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 302
x-web-server-version: 23.12.4.2
runtime_model: B2
x-beserver: GVYP280MB0079
x-clique: CLSWEP280GVX01
x-besku: UNKNOWN
x-proxy-routingcorrectness: 1
x-proxy-backendserverstatus: 302
x-firsthopcafeefz: GVX
x-bepartition: Clique/CLSWEP280GVX01
x-feproxyinfo: GVX0EPF0000FA88.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
ms-cv: OwcqIyWWYSGIFotDEUumDQ.1
x-powered-by: ASP.NET
x-feserver: GVX0EPF0000FA88
date: Tue, 12 Dec 2023 06:49:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res.cdn.office.net/owamail/hashed-v1/scripts/owa.524889.m.a2963223.js
7.1 kB URL res.cdn.office.net/owamail/hashed-v1/scripts/owa.524889.m.a2963223.js
IP
File type ASCII text, with very long lines (34255), with no line terminators
Hash 47f17aae77dedecf5fa5f42ac4ee5ade
140ad97baa21a69f1c68be6b87cc9d9cfff68463
5ded65c88ef8920781e6850eb0d156f66ccc71480bb14c92d8d060fb85d8f916
GET /owamail/hashed-v1/scripts/owa.524889.m.a2963223.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://outlook.office.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: br
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id
age: 310472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: application/javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
last-modified: Fri, 01 Dec 2023 15:22:33 GMT
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Oslo&ASN=50304&Country=NO&Region=03&RequestIdentifier=76208169156162169873023437497037073860"}],"include_subdomains ":true}
server: ECAcc (ska/F764)
strict-transport-security: max-age=31536000; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-cdn-provider: Verizon
x-content-type-options: nosniff
x-ms-request-id: 20ca3da6-201e-004b-6cf4-293692000000
content-length: 7141
outlook.office.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8
302 Found 867 B URL User Request GET HTTP/2 outlook.office.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectoutlook.com
Fingerprint36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09
ValidityTue, 31 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document, ASCII text, with very long lines (795), with CRLF line terminators
Hash cd0f7de29f91807bf36e79c273b28b86
5ab8c169f2024ac4aeaf0083f1a17af021d836d8
c89535102a3e701f92d0312fff626202071c5b6c45c7902d0d2f4c57ce53c0bd
GET /owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8 HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ClientId=2456F1837CA2431E8FB23C96999E7A97; OIDC=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 867
content-type: text/html; charset=utf-8
location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
server: Microsoft-IIS/10.0
request-id: 8c11d708-1720-6d38-eba9-126de7d99273
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
x-calculatedbetarget: GV3P280MB0481.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 302
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: RoutingKeyCookie=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.token.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.token.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.id_token.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.code.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_nonce.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_correlation_id=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.tokenPostPath=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.id_token.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.code.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_nonce.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_correlation_id=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.tokenPostPath=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.nonce.v3.JptE-qaeBWni6z1SngdzKBhh8C9TwFn47NiiezljZjU=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714; expires=Tue, 12-Dec-2023 07:49:03 GMT; path=/;SameSite=None; secure; HttpOnly
HostSwitchPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OptInPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
SuiteServiceProxyKey=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
RoutingKeyCookie=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.token.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.token.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.id_token.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.code.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_nonce.v1=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_correlation_id=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.tokenPostPath=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.id_token.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.code.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_nonce.v1=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.idp_correlation_id=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.tokenPostPath=; domain=outlook.office.com; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OpenIdConnect.nonce.v3.JptE-qaeBWni6z1SngdzKBhh8C9TwFn47NiiezljZjU=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714; expires=Tue, 12-Dec-2023 07:49:03 GMT; path=/;SameSite=None; secure; HttpOnly
HostSwitchPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
OptInPrg=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
SuiteServiceProxyKey=; expires=Sun, 12-Dec-1993 06:49:03 GMT; path=/; secure
X-OWA-RedirectHistory=ArLym14BuSbVbd762wg; expires=Tue, 12-Dec-2023 12:51:03 GMT; path=/;SameSite=None; secure; HttpOnly
x-rum-validated: 1
x-rum-notupdatequeriedpath: 1
x-rum-notupdatequerieddbcopy: 1
x-content-type-options: nosniff
x-besku: WCS7
x-owa-diagnosticsinfo: 1;0;0
x-iids: 0
x-backend-begin: 2023-12-12T06:49:03.542
x-backend-end: 2023-12-12T06:49:03.542
x-diaginfo: GV3P280MB0481
x-beserver: GV3P280MB0481
x-ua-compatible: IE=EmulateIE7
x-proxy-routingcorrectness: 1
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=GVX&RemoteIP=91.90.42.0"}],"include_subdomains":true}
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-proxy-backendserverstatus: 302
x-firsthopcafeefz: GVX
x-feproxyinfo: GVX0EPF0000FA88.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
x-feserver: GVX0EPF0000FA88
date: Tue, 12 Dec 2023 06:49:02 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.12&apikey=3b1ea01450be48f29759d868931e225d-7167685b-f6ff-421c-aa64-8ae16fe92128-7283&upload-time=1702363743716&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.12&apikey=3b1ea01450be48f29759d868931e225d-7167685b-f6ff-421c-aa64-8ae16fe92128-7283&upload-time=1702363743716&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.12&apikey=3b1ea01450be48f29759d868931e225d-7167685b-f6ff-421c-aa64-8ae16fe92128-7283&upload-time=1702363743716&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5209
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=e1a09c2cd50f4a21ae8eada1ac566b79&HASH=e1a0&LV=202312&V=4&LU=1702363743582; Domain=.microsoft.com; Expires=Wed, 11 Dec 2024 06:49:03 GMT; Path=/;Secure; SameSite=None
MS0=8c1d679d343a42e69ecd50f9b452de17; Domain=.microsoft.com; Expires=Tue, 12 Dec 2023 07:19:03 GMT; Path=/;Secure; SameSite=None
time-delta-millis: -134
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: time-delta-millis
date: Tue, 12 Dec 2023 06:49:02 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
200 OK 16 kB URL User Request GET HTTP/1.1 login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (24870), with CRLF, LF line terminators
Hash 65fde78caeb49d6724ec58c21a58c494
ef0d5183f9ec50d37cf4f266a2d8a091a0ddb5b9
3941615f710a6d6b1e4e0e028a6e648f07dada98d198b1734b7657395b221f47
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: b2d98a45-d9d5-4f26-b7c2-b35730396200
x-ms-ests-server: 2.1.16942.4 - NEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.AXkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-4MFKKuZHAuoZFTkYOHgw9eSy_OfGhmzOBJTuiZtNAjA_WbjfBml_l191PUS-jgl6Hyedk8SbJQfNyKeFJSLOjEH_D_vHht4PsBDK-tZ4LSUgAA; expires=Thu, 11-Jan-2024 06:49:03 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-P2KxNnY6fSNefJd0uoEVG8dMzixXwzFZqcC3_-vjrsF3t38-02JTMJDGA8OdOaxdFbMPTYwdmsVzNfHuOd_Jao3YKG63I4VnCBcoSE8YJrCt-n-SXrxTbPTh_tl4Nerj5XDwRAxHykiRNfhEe5wr0ce5kJHiRp7O7teCIVYc_OUgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-SIuq6SqHgy8=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-2xlAtZ_uz4bmKfJVJZfKBh9_2qYJSflgkLAl6tD6q9nqNUkXz99Kr4WwR0ocltdQcFIOkJki6t-mDAs7M3fx5XUYzBlt5_qDtJHvgRsMky58hTxtxX_51ixbPp08QepLk4hy7iX7yzTqYMwikqN4mCAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AnytJ9jB-1JDoKIb87cLGPierOTJAQAAAF_5Cd0OAAAA; expires=Thu, 11-Jan-2024 06:49:03 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 12 Dec 2023 06:49:02 GMT
Content-Length: 15803
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css
200 OK 20 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash 087cbf41bea0d506c90719671b6cad21
6b937c0788b61572a829dfba228814b957350cce
5e47dd51ca94efccd58f4a7dc95a51744493292586fbe031e78f72508f0f4f89
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2097266
cache-control: public, max-age=31536000
content-md5: cclsNwaya3AD0ci2cGBnrw==
content-type: text/css
date: Tue, 12 Dec 2023 06:49:03 GMT
etag: 0x8DBE70343D336EF
last-modified: Fri, 17 Nov 2023 00:22:21 GMT
server: ECAcc (ska/F77A)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9f40a161-b01e-0098-79b4-19e540000000
x-ms-version: 2009-09-19
content-length: 20226
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uwo3eukwj1jimmqictgmkq2.js
200 OK 15 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uwo3eukwj1jimmqictgmkq2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32011)
Hash bb03b77ae9168f58c898ca8872d82691
0175923c6e73da237756a05f7950cfe9c8739a0a
37119e9799d67c0beeaf93167c0006be310cb8afa32bd6666f427a799ffad845
GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uwo3eukwj1jimmqictgmkq2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1104165
cache-control: public, max-age=31536000
content-md5: Jp4pCVSUbVaQb8WvW3hZzg==
content-type: application/x-javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
etag: 0x8DBF066735CDA91
last-modified: Tue, 28 Nov 2023 23:05:01 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: afbdf7e7-b01e-00b4-23bc-22806a000000
x-ms-version: 2009-09-19
content-length: 15176
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_rBkXYjh21YAKS8SjeOJwmw2.js
200 OK 118 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_rBkXYjh21YAKS8SjeOJwmw2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (64616)
Size 118 kB (118032 bytes)
Hash ac1917623876d5800a4bc4a378e2709b
92c27bf175e6b7ac786fa6aa0e7dbb9aa66a30ef
62c7b35c728130c5a262f659268709c22995a19e96b39d66dd1a41489d1eb4f3
GET /shared/1.0/content/js/ConvergedLogin_PCore_rBkXYjh21YAKS8SjeOJwmw2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1014010
cache-control: public, max-age=31536000
content-md5: 9KFk2J8ez5wderfE1yvVmg==
content-type: application/x-javascript
date: Tue, 12 Dec 2023 06:49:03 GMT
etag: 0x8DBF105E5246EF5
last-modified: Wed, 29 Nov 2023 18:06:22 GMT
server: ECAcc (ska/F6F4)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 762d350c-801e-00eb-2c8e-236a46000000
x-ms-version: 2009-09-19
content-length: 118032
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
200 OK 61 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4877efc88055d60953886ec55b04de34
2341b026a3e2a3b01afa1a39d1706840d75e09b3
8405362eb8f09df13ae244de155b51b1577274673d9728b6c81cd0278a63c8b0
GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16890150
cache-control: public, max-age=31536000
content-md5: wegr9xrdYirQ87+FcvY0/A==
content-type: application/x-javascript
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5D44A2CEB430
last-modified: Thu, 25 May 2023 17:22:37 GMT
server: ECAcc (ska/F6F4)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 23240edd-c01e-002b-0229-93749b000000
x-ms-version: 2009-09-19
content-length: 61052
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
200 OK 17 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 16863236
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_560f3c6ac4b56ef7114c.js
200 OK 35 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_560f3c6ac4b56ef7114c.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (56725)
Hash eea21e42e7bc5a48a8d52975267e97fe
c3afac753fd43df65f53e2b6d79cfb787406e64c
3fd4de4b26a7acec23971755c0e54a144f523b8322c669293fced93b587de41f
GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_560f3c6ac4b56ef7114c.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1014010
cache-control: public, max-age=31536000
content-md5: 4c2/q0kG7m1qkRlb83TqgA==
content-type: application/x-javascript
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DBF105C7DB2D3B
last-modified: Wed, 29 Nov 2023 18:05:33 GMT
server: ECAcc (ska/F6A8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 87c72a7d-b01e-001c-1b8e-231e1d000000
x-ms-version: 2009-09-19
content-length: 34608
X-Firefox-Spdy: h2
outlook.office365.com/owa/prefetch.aspx
200 OK 1.2 kB URL GET HTTP/2 outlook.office365.com/owa/prefetch.aspx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectoutlook.com
Fingerprint36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09
ValidityTue, 31 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1188), with CRLF line terminators
Hash e1c0bb6c722eb80af95b66bb8c8fa2f6
e192caf335dfc5fd1b31457fca5553e1290e76ca
729b9c4cf3c3a4db7f259fc6207fe98d7a678d9361f58cfca51d2ef7fd4dc8d0
GET /owa/prefetch.aspx HTTP/1.1
Host: outlook.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, no-store
content-length: 1236
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
request-id: faaea1b0-8603-14bf-69e1-7da6a5425112
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
x-calculatedfetarget: MM0P280CU003.internal.outlook.com
set-cookie: ClientId=B90C8EEA8F0B4C7687B490A78930E34A; expires=Thu, 12-Dec-2024 06:49:04 GMT; path=/;SameSite=None; secure
ClientId=B90C8EEA8F0B4C7687B490A78930E34A; expires=Thu, 12-Dec-2024 06:49:04 GMT; path=/;SameSite=None; secure
OIDC=1; expires=Wed, 12-Jun-2024 06:49:04 GMT; path=/;SameSite=None; secure; HttpOnly
OWAPF=v:15.20.7068.33&l:mouse; path=/; secure; HttpOnly
x-calculatedbetarget: MM0P280MB0488.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 200, 200
x-rum-validated: 1
x-rum-notupdatequeriedpath: 1
x-rum-notupdatequerieddbcopy: 1
x-content-type-options: nosniff
x-besku: WCS7
x-owa-version: 15.20.7068.33
x-owa-diagnosticsinfo: 1;0;0
x-iids: 0
x-backend-begin: 2023-12-12T06:49:04.303
x-backend-end: 2023-12-12T06:49:04.303
x-diaginfo: MM0P280MB0488
x-beserver: MM0P280MB0488
x-ua-compatible: IE=EmulateIE7
x-proxy-routingcorrectness: 1
x-proxy-backendserverstatus: 200
x-feproxyinfo: GV3P280CA0106.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=GVX&RemoteIP=91.90.42.0"}],"include_subdomains":true}
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-firsthopcafeefz: GVX
x-feserver: MM0P280CA0082, GV3P280CA0106
date: Tue, 12 Dec 2023 06:49:04 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/common/instrumentation/reportbssotelemetry?hpgid=1104&hpgact=1800&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&hpgrequestid=b2d98a45-d9d5-4f26-b7c2-b35730396200
200 OK 265 B URL POST HTTP/1.1 login.microsoftonline.com/common/instrumentation/reportbssotelemetry?hpgid=1104&hpgact=1800&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&hpgrequestid=b2d98a45-d9d5-4f26-b7c2-b35730396200
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type JSON data
- , ASCII text, with no line terminators
Hash 2b11fa1e2dfa35ee2c08dcb2ecf94317
4cb59760bb3193f85d000cbf71e685369bfddbf4
dfaf1b77d1dd47b08ce97e26ada165121255697277feabd5ed7dc453726a5fe7
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
POST /common/instrumentation/reportbssotelemetry?hpgid=1104&hpgact=1800&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&hpgrequestid=b2d98a45-d9d5-4f26-b7c2-b35730396200 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Content-Type: text/plain;charset=UTF-8
Content-Length: 217
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Cookie: buid=0.AXkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-4MFKKuZHAuoZFTkYOHgw9eSy_OfGhmzOBJTuiZtNAjA_WbjfBml_l191PUS-jgl6Hyedk8SbJQfNyKeFJSLOjEH_D_vHht4PsBDK-tZ4LSUgAA; esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-P2KxNnY6fSNefJd0uoEVG8dMzixXwzFZqcC3_-vjrsF3t38-02JTMJDGA8OdOaxdFbMPTYwdmsVzNfHuOd_Jao3YKG63I4VnCBcoSE8YJrCt-n-SXrxTbPTh_tl4Nerj5XDwRAxHykiRNfhEe5wr0ce5kJHiRp7O7teCIVYc_OUgAA; esctx-SIuq6SqHgy8=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-2xlAtZ_uz4bmKfJVJZfKBh9_2qYJSflgkLAl6tD6q9nqNUkXz99Kr4WwR0ocltdQcFIOkJki6t-mDAs7M3fx5XUYzBlt5_qDtJHvgRsMky58hTxtxX_51ixbPp08QepLk4hy7iX7yzTqYMwikqN4mCAA; fpc=AnytJ9jB-1JDoKIb87cLGPierOTJAQAAAF_5Cd0OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; MicrosoftApplicationsTelemetryDeviceId=158a75ae-fd53-4da3-bbec-1fdca5c6bed3; brcap=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 694f443c-ba0d-4f10-8b57-d5aed7106300
x-ms-ests-server: 2.1.16942.4 - SEC ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: fpc=AnytJ9jB-1JDoKIb87cLGPierOTJAQAAAF_5Cd0OAAAA; expires=Thu, 11-Jan-2024 06:49:04 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 12 Dec 2023 06:49:03 GMT
Content-Length: 265
aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
200 OK 987 B URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
- data
Hash e58aafc980614a9cd7796bea7b5ea8f0
d4cac92dcde0caf7c571e6d791101da94fdbd2ca
8b34a475187302935336bf43a2bf2a4e0adb9a1e87953ea51f6fcf0ef52a4a1d
GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16760467
cache-control: public, max-age=31536000
content-md5: 5YqvyYBhSpzXeWvqe16o8A==
content-type: image/jpeg
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5C3F41C14038
last-modified: Wed, 24 May 2023 10:11:35 GMT
server: ECAcc (ska/F73C)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 654efbcd-601e-0058-0957-94ba20000000
x-ms-version: 2009-09-19
content-length: 987
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
200 OK 18 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1920x1080, components 3
- data
Hash 7916a894ebde7d29c2cc29b267f1299f
78345ca08f9e2c3c2cc9b318950791b349211296
d8f5ab3e00202fd3b45be1acd95d677b137064001e171bc79b06826d98f1e1d3
GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16760467
cache-control: public, max-age=31536000
content-md5: eRaolOvefSnCzCmyZ/Epnw==
content-type: image/jpeg
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5C3F41AC335E
last-modified: Wed, 24 May 2023 10:11:35 GMT
server: ECAcc (ska/F779)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3f582758-701e-0036-0657-94f93d000000
x-ms-version: 2009-09-19
content-length: 17453
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
200 OK 5.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
- data
Hash 8b36337037cff88c3df203bb73d58e41
1ada36fa207b8b96b2a5f55078bfe2a97acead0e
e4e1e65871749d18aea150643c07e0aab2057da057c6c57ec1c3c43580e1c898
GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16760467
cache-control: public, max-age=31536000
content-md5: izYzcDfP+Iw98gO7c9WOQQ==
content-type: image/png
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5C3F457C234F
last-modified: Wed, 24 May 2023 10:11:42 GMT
server: ECAcc (ska/F747)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: ef26e06c-a01e-0096-6257-947f29000000
x-ms-version: 2009-09-19
content-length: 5139
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
200 OK 1.4 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16890149
cache-control: public, max-age=31536000
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
content-type: image/svg+xml
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5C3F495F4B8C
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F7A1)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3ac418b8-601e-0058-0129-93ba20000000
x-ms-version: 2009-09-19
content-length: 1435
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_9772c805c34de2cabc91.js
200 OK 36 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_9772c805c34de2cabc91.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (64612)
Hash b87965f3e178b8b32c030b83bbaba811
83fc919963bc9e7640eeda696bd02b77cca9ad26
45ebebdec2e08443505458e83ac6027c7cc905f858f5f308a4da92d1328c584c
GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_9772c805c34de2cabc91.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1000659
cache-control: public, max-age=31536000
content-md5: FYts0sMVoY2lMK0VnepauQ==
content-type: application/x-javascript
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DBF105CC88EA42
last-modified: Wed, 29 Nov 2023 18:05:41 GMT
server: ECAcc (ska/F6A4)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 573d00ce-901e-00b6-49ad-23d66e000000
x-ms-version: 2009-09-19
content-length: 35913
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.0.mouse.js
200 OK 180 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.0.mouse.js
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Size 180 kB (179692 bytes)
Hash 761ce9e68c8d14f49b8bf1a0257b69d6
8cf5d714d35effa54f3686065cb62cce028e2c77
beaa65ad34340e61e9e701458e2ccff8f9073fdebbc3593a2c7ec8afeacb69c1
GET /owa/prem/15.20.7068.33/scripts/boot.worldwide.0.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Sun, 10 Dec 2023 23:39:26 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 179692
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.1.mouse.js
200 OK 163 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.1.mouse.js
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size 163 kB (163064 bytes)
Hash 9786d38346567e5e93c7d03b06e3ea2d
23ef8c59c5c9aa5290865933b29c9c56ab62e3b0
263307e3fe285c85cb77cf5ba69092531ce07b7641bf316ef496dcb5733af76c
GET /owa/prem/15.20.7068.33/scripts/boot.worldwide.1.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Sun, 10 Dec 2023 23:39:13 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 163064
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.2.mouse.js
200 OK 170 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.2.mouse.js
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size 170 kB (169666 bytes)
Hash 12204899d75fc019689a92ed57559b94
ccf6271c6565495b18c1ced2f7273d5875dbfb1f
39dafd5aca286717d9515f24cf9be0c594dfd1ddf746e6973b1ce5de8b2dd21b
GET /owa/prem/15.20.7068.33/scripts/boot.worldwide.2.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Sun, 10 Dec 2023 23:39:28 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 169666
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.3.mouse.js
200 OK 146 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/scripts/boot.worldwide.3.mouse.js
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size 146 kB (145599 bytes)
Hash d9e3d2ce0228d2a5079478aae5759698
412f45951c6aeda5f3df2c52533171fc7bdd5961
7041d585609800051e4f451792aec2b8bd06a4f2d29ed6f5ad8841aae5107502
GET /owa/prem/15.20.7068.33/scripts/boot.worldwide.3.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Sun, 10 Dec 2023 23:39:14 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 145599
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.png
200 OK 132 B URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.png
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
- data
Hash 3eda15637afeac6078f56c9dcc9bbdb8
97b900884183cb8cf99ba069eedc280c599c1b74
68c66d144855ba2bc8b8bee88bb266047367708c1e281a21b9d729b1fbd23429
GET /owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.png HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 132
content-type: image/png
last-modified: Sun, 10 Dec 2023 23:54:41 GMT
server: AkamaiNetStorage
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.css
200 OK 288 B URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.css
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (994), with no line terminators
Hash e2110b813f02736a4726197271108119
d7ac10cc425a7b67bf16dda0aaef1feb00a79857
6d1be7ed96dd494447f348986317faf64728ccf788be551f2a621b31ddc929ac
GET /owa/prem/15.20.7068.33/resources/images/0/sprite1.mouse.css HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/css
last-modified: Sun, 10 Dec 2023 23:54:39 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 288
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/0/boot.worldwide.mouse.css
200 OK 44 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/0/boot.worldwide.mouse.css
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash af8d946b64d139a380cf3a1c27bdbeb0
c76845b6ffeaf14450795c550260eb618abd60ab
37619b16288166cc76403f0b7df6586349b2d5628de00d5850c815d019b17904
GET /owa/prem/15.20.7068.33/resources/styles/0/boot.worldwide.mouse.css HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/css
last-modified: Sun, 10 Dec 2023 23:55:27 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 44144
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
200 OK 621 B URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
IP
Requested by https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=8c11d708-1720-6d38-eba9-126de7d99273&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638379605435426489.88dc2959-8746-428c-9c8c-cb7786e1c714&state=Dcu9DoIwFEDhVt_FDSmlP_cOxEFjGHBBEw1be-kAkWAKwfj2djjfdjhjbJ_apbhIMGtKKC0aoVWplTQK8AjQk0SNGVhlMiWBMqQEeWvBhIJsoXh6L_n8dflpWd0aquIQQz_EQOtjrlzdCqpvpvnh1r_axUuMzYRTN73H7q5HL8Xmn9ePP8Mf
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (1592), with no line terminators
Hash 4e48046ce74f4b89d45037c90576bfac
4a41b3b51ed787f7b33294202da72220c7cd2c32
8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93
GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16875382
cache-control: public, max-age=31536000
content-md5: R2FAVxfpONfnQAuxVxXbHg==
content-type: image/svg+xml
date: Tue, 12 Dec 2023 06:49:04 GMT
etag: 0x8DB5C3F4BB4F03C
last-modified: Wed, 24 May 2023 10:11:52 GMT
server: ECAcc (ska/F744)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 26571626-801e-0008-2f4c-93f9aa000000
x-ms-version: 2009-09-19
content-length: 621
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff
200 OK 78 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 77596, version 1.0
- data
Hash 343f04165d332680874f4dc072e86cf7
d42b7257282b914c976c00c5024f1cc96759da57
d689295b1e30160484089417c94a24292d734ef091942ef091899fafe62b2b6a
GET /owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://outlook.office365.com
DNT: 1
Connection: keep-alive
Referer: https://r4.res.office365.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
last-modified: Sun, 10 Dec 2023 23:55:55 GMT
server: AkamaiNetStorage
content-length: 77596
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/font-woff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff
200 OK 78 kB URL GET HTTP/2 r4.res.office365.com/owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://outlook.office365.com/owa/prefetch.aspx
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 77596, version 1.0
- data
Hash 343f04165d332680874f4dc072e86cf7
d42b7257282b914c976c00c5024f1cc96759da57
d689295b1e30160484089417c94a24292d734ef091942ef091899fafe62b2b6a
GET /owa/prem/15.20.7068.33/resources/styles/fonts/office365icons.woff HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://outlook.office365.com
DNT: 1
Connection: keep-alive
Referer: https://outlook.office365.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
last-modified: Sun, 10 Dec 2023 23:55:55 GMT
server: AkamaiNetStorage
content-length: 77596
cache-control: public,max-age=630720000, s-maxage=630720000
date: Tue, 12 Dec 2023 06:49:04 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/font-woff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
200 OK 13 kB URL User Request GET HTTP/2 IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectoutlook.com
Fingerprint36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09
ValidityTue, 31 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (13276), with no line terminators
Hash a858faa440de9871b23e202af5b3719d
22bb4bbb9f82952ff0c233bae08081908a6e2de7
0524cbf31a6327632813d5be3a18ffe5f3e6a03e4323903d2bbf5c6c9cbb4d33
GET /mail/ HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-IIS/10.0
request-id: a67285a2-27e8-6d4c-7c43-23ee8950a92a
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
x-preferredroutingkeydiagnostics: 0
x-calculatedbetarget: GVYP280MB0799.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 200
set-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
ClientId=2456F1837CA2431E8FB23C96999E7A97; expires=Thu, 12 Dec 2024 06:49:01 GMT; path=/; secure; samesite=none
x-web-server-version: 23.12.4.2
runtime_model: B2
x-beserver: GVYP280MB0799
x-clique: CLSWEP280GVX01
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.microsoft.com/report/OutlookWeb-Mail-PROD;
content-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net swx.cdn.skype.com 'self'; script-src 'nonce-oOLk0u31A0M1/+QLwi3cgQ==' *.res.office365.com *.fluidpreview.office.net *.cdn.office.net wss://*.delve.office.com:443 shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.bing.com *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' *.yammer.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.yammer.com 'unsafe-inline'; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.spoppe.com *.onedrive.com my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms nleditor.osi.officeppe.net pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com 'self' login.microsoftonline.com outlook.office365.com teams.microsoft.com *.teams.microsoft.com *.yammer.com *.svc.ms *.licdn.com o365auditrealtimeingestion.manage.officeppe.com o365auditrealtimeingestion.manage.officeppe.com:445 o365auditrealtimeingestion.manage.office.com o365auditrealtimeingestion.manage.office.com:445 files.yammerusercontent.com mysite.volvocars.net wss://augloop-dogfood.officeppe.com wss://*.augloop-dogfood.officeppe.com wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com *.googleapis.com admin.microsoft.com api.tenor.com attachment.outlook.live.net *.msedge.net; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com 'self' *.yammer.com; media-src blob: *.res.office365.com *.cdn.office.net *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' *.yammer.com attachments.office.net attachment.outlook.live.net *.sharepoint.com; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; report-uri https://csp.microsoft.com/report/OutlookWeb-Mail-PROD; upgrade-insecure-requests;
x-app-name: Mail
referrer-policy: no-referrer
cross-origin-opener-policy: same-origin-allow-popups
x-client-version: 20231201002.05
x-besku: UNKNOWN
x-proxy-routingcorrectness: 1
x-proxy-backendserverstatus: 200
x-firsthopcafeefz: GVX
x-bepartition: Clique/CLSWEP280GVX01
x-feproxyinfo: GVX0EPF0000FA88.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
ms-cv: ooVypugnTG18QyPuiVCpKg.1
x-powered-by: ASP.NET
x-feserver: GVX0EPF0000FA88
date: Tue, 12 Dec 2023 06:49:01 GMT
X-Firefox-Spdy: h2
uiy.organizationreport.co/?S9uAn=pqc/
302 Found 13 kB URL User Request GET HTTP/2 uiy.organizationreport.co/?S9uAn=pqc/
IP
Certificate IssuerLet's Encrypt
Subjectorganizationreport.co
Fingerprint26:7B:A7:3F:95:D1:D1:90:3A:42:96:C5:63:D8:A2:67:89:A8:A8:0A
ValidityFri, 24 Nov 2023 13:40:54 GMT - Thu, 22 Feb 2024 13:40:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?S9uAn=pqc/ HTTP/1.1
Host: uiy.organizationreport.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 12 Dec 2023 06:49:01 GMT
content-type: text/html; charset=utf-8
location: https://outlook.office.com/mail/
referrer-policy: origin
X-Firefox-Spdy: h2
192.119.110.219
23.73.4.86
13.69.116.107
20.190.177.147
0.0.0.0