{"report_id":"4dd2e8f4-864c-4bab-8b3a-41ca10378822","version":6,"status":"done","tags":[],"date":"2025-08-04T09:08:28Z","url":{"schema":"http","addr":"login.live.com","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.190.181.3","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"login.live.com/","fqdn":"login.live.com","domain":"live.com","tld":"com"},"title":"Sign in"},"submit":{"url":{"schema":"http","addr":"login.live.com","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.190.181.3","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-08T09:08:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"browser.events.data.microsoft.com","ip":{"addr":"51.132.193.104","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United Kingdom","country_code":"GB"},"domain_registered":"1991-05-02","domain_rank":290,"first_seen":"2018-05-25T06:23:05Z","last_seen":"2025-08-01T05:36:40.002421Z","alert_count":0,"request_count":2,"received_data":1659,"sent_data":1562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"login.live.com","ip":{"addr":"20.190.181.3","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"1994-12-28","domain_rank":79,"first_seen":"2012-05-21T07:00:20Z","last_seen":"2025-07-31T02:19:50.366904Z","alert_count":0,"request_count":2,"received_data":31885,"sent_data":1528,"comment":"","tags":null,"fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"Azure Monitor","description":"Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services.","website":"https://azure.microsoft.com/en-us/services/monitor","common_platform_enumeration":"","icon":"Azure.svg","categories":["Analytics","Performance"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"logincdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":2330,"first_seen":"2019-04-23T01:13:28Z","last_seen":"2025-08-01T17:29:48.852553Z","alert_count":0,"request_count":6,"received_data":2290127,"sent_data":3113,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"fpt.live.com","ip":{"addr":"20.62.63.247","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-12-28","domain_rank":58693,"first_seen":"2017-01-31T07:18:17Z","last_seen":"2025-07-31T03:47:48.103176Z","alert_count":0,"request_count":2,"received_data":25109,"sent_data":3210,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"df.cfp.microsoft.com","ip":{"addr":"20.62.63.247","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1991-05-02","domain_rank":0,"first_seen":"2025-02-06T05:18:01Z","last_seen":"2025-07-31T03:47:48.205332Z","alert_count":0,"request_count":1,"received_data":2630,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":[{"md5":"506df4d05a2f4a46ea3bc0a884b77999","sha1":"185235b2c362d81c4e52f72133c61be40157b317","sha256":"96bbba17543406ae8acfb4ef59d1f086e3750159a1d39fb7b5308f22b932a1a3","sha512":"f80b811ae0e74cf3c208b94c6957cbd9ac73d77e83a38e4605b61609bfaf2bc226fc807de907e053d5d636272889cb37c2d4f44c3d5dcce93ec7832c6e82fc14","ssdeep":"","tlshash":"7ab0922299a79aa8a80245288c7fa7669e25428263a49e6288225a749bae009049008d","size":115,"data":"","first_seen":"2025-08-04T09:08:30.367446Z","last_seen":"2025-08-04T09:08:30.367446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"51.132.193.104","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:10.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 02 Jul 2025 01:00:37 GMT","end":"Mon, 29 Dec 2025 01:00:37 GMT"},"fingerprint":{"sha1":"93:F1:E9:F1:3F:F8:98:0F:75:F1:5E:11:C5:15:36:20:56:B9:C8:D6","sha256":"3D:4C:82:4B:E0:12:69:FE:8E:EF:25:EB:2D:6B:28:FA:72:30:39:72:93:FB:B0:0D:D8:B4:C8:72:C3:22:61:8E"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time\r\nReferer: https://login.live.com/\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://login.live.com\r\ndate: Mon, 04 Aug 2025 09:08:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":116,"dns":49,"connect":24,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.190.181.3","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-04T09:08:06.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:D4:A3:92:59:4E:B8:B8:29:F1:E3:EB:7E:BE:C7:98:77:4F:A0:FC","sha256":"82:EA:45:B4:5F:CD:6A:96:3F:03:60:38:C4:FE:61:A3:64:FE:5D:F2:33:1A:15:9F:C0:F6:25:35:12:E4:E1:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nExpires: Mon, 04 Aug 2025 09:07:06 GMT\r\nVary: Accept-Encoding\r\nP3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nX-Frame-Options: deny\r\nX-DNS-Prefetch-Control: on\r\nLink: \u003chttps://logincdn.msauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://acctcdn.msauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://acctcdn.msftauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://acctcdn.msauth.net/\u003e; rel=dns-prefetch, \u003chttps://acctcdn.msftauth.net/\u003e; rel=dns-prefetch, \u003chttps://acctcdnmsftuswe2.azureedge.net/\u003e; rel=dns-prefetch, \u003chttps://logincdn.msauth.net/\u003e; rel=dns-prefetch, \u003chttps://logincdn.msftauth.net/\u003e; rel=dns-prefetch, \u003chttps://lgincdnmsftuswe2.azureedge.net/\u003e; rel=dns-prefetch\r\nContent-Security-Policy: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-/O1ZkmzIJEpm81S6vYCRU50UlXjHquPSaFylh4wcBhE=' https://js.monitor.azure.com https://logincdn.msauth.net https://logincdn.msftauth.net https://lgincdnvzeuno.azureedge.net https://lgincdnmsftuswe2.azureedge.net https://*.live.com https://*.microsoft.com https://*.office.net https://*.bing.com https://*.sharepointonline.com 'report-sample'; img-src 'self' https://js.monitor.azure.com https://logincdn.msauth.net https://logincdn.msftauth.net https://lgincdnvzeuno.azureedge.net https://lgincdnmsftuswe2.azureedge.net https://*.live.com https://*.microsoft.com https://*.office.net https://*.bing.com https://*.sharepointonline.com; report-uri https://csp.microsoft.com/report/MSA-UX-All\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nx-ms-route-info: C505_SN1\r\nx-ms-request-id: da767df6-ea3f-43ce-96a8-7d5f3fe511fe\r\nPPServer: PPV: 30 H: SN1PEPF0002F047 V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: uaid=c9f43e59f65c4b52a7cc9554553f24df; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly\nMSPRequ=id=N\u0026lt=1754298486\u0026co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly\nMSCC=91.90.42.154-NO; expires=Sat, 29-Aug-2026 09:08:06 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly\nMSPOK=$uuid-1e1bdfa0-2470-40de-aa37-bf67c6d7d258; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly\nOParams=11O.DjIOOo2BEvraZvWsDWmzHdN*ddu*Ji29l1wyaS2aDSqIJfPRTXrY9mz68XnqEYIAajUkBghTxFKZdniAH73VBBOBmVxA20AhRzYdI78GQiG4TibOvQrsvHM636mYf8lBQMjEM2o!nLta0hVepb1AX30$; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly\r\nDate: Mon, 04 Aug 2025 09:08:06 GMT\r\nContent-Length: 11973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"Azure Monitor","description":"Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services.","website":"https://azure.microsoft.com/en-us/services/monitor","common_platform_enumeration":"","icon":"Azure.svg","categories":["Analytics","Performance"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28542,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27426)","md5":"def34a604f769319996602deda9776b3","sha1":"5eac84cf18cac17e0614b1f3135ef2df1534d7ad","sha256":"34f09c8fd3a3a4e5bf8b258585b4a3038a6d3dca39417c650a8f2ceae722f327","sha512":"a9d172f98cabe8a43a24814a26e64230550911a569236ac418050ba405778f95294985e72ce8254ed44dac40907e08ca92eaef6ce24543a8a29e9494d829f142","ssdeep":"384:BeXaZa7r7O56lZKNtr9bsfAuZuASzc3hj+1d5o6VElUYR6YmF37pHpvM4niaolAd:BorWtJQfAuUzcRU0ljMHFpJvMZQ","tlshash":"e7d25deb3f00982bcfd327a4d06eb705a6368463a994dc89e26dc15cde86b074777709","first_seen":"2025-08-04T09:08:30.358563Z","last_seen":"2025-08-04T09:08:30.358563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":44,"dns":1,"connect":10,"send":0,"wait":171,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/5/images/fluent_web_light_57fee22710b04cebe1d5.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:07.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /shared/5/images/fluent_web_light_57fee22710b04cebe1d5.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6213\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 15 Mar 2025 01:20:06 GMT\r\netag: \"0x8DD635F852A6C38\"\r\nx-ms-request-id: 5a03fbf4-101e-0016-550d-040a2c000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u6s\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":44327,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57fee22710b04cebe1d5fccfc40a2850","sha1":"63f32442fd8c75956896b9677efb45c342fbc87d","sha256":"e122dfeee73db9cb846feea1467b85edb1ae624556c643a9c9cc41056508901b","sha512":"088b89fd6315dacfb236ad1b4cd1a935f7539b261f2fed41d4de11116b9aed65f492bd4bd1a9255cfdac2304be4fcc9afcf1c2bb00a49bf5b812fa69d70adb36","ssdeep":"768:iQZ4sjQjCWKkofku9aD5C0u2WiYynFC4dTZEyMxZDYUXCriSivNXnZNocmcJxpj:SsjQjCWKkofku9s5C0u2WfynFC4dTZEf","tlshash":"b413225ed72d39bbd44bc6ecea929008321d43d778d0838a95b9cf6f1469c875c4eba0","first_seen":"2025-03-08T13:20:19.243153Z","last_seen":"2026-04-01T22:07:28.082411Z","times_seen":3770,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/GetExperimentAssignments.srf","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.190.181.3","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:07.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:D4:A3:92:59:4E:B8:B8:29:F1:E3:EB:7E:BE:C7:98:77:4F:A0:FC","sha256":"82:EA:45:B4:5F:CD:6A:96:3F:03:60:38:C4:FE:61:A3:64:FE:5D:F2:33:1A:15:9F:C0:F6:25:35:12:E4:E1:6C"}}},"request":{"raw":"POST /GetExperimentAssignments.srf HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nhpgid: 33\r\nhpgact: 0\r\ncorrelationId: c9f43e59f65c4b52a7cc9554553f24df\r\nclient-request-id: c9f43e59f65c4b52a7cc9554553f24df\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 700\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uaid=c9f43e59f65c4b52a7cc9554553f24df; MSPRequ=id=N\u0026lt=1754298486\u0026co=1; MSCC=91.90.42.154-NO; MSPOK=$uuid-1e1bdfa0-2470-40de-aa37-bf67c6d7d258; OParams=11O.DjIOOo2BEvraZvWsDWmzHdN*ddu*Ji29l1wyaS2aDSqIJfPRTXrY9mz68XnqEYIAajUkBghTxFKZdniAH73VBBOBmVxA20AhRzYdI78GQiG4TibOvQrsvHM636mYf8lBQMjEM2o!nLta0hVepb1AX30$\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache\r\nPragma: no-cache\r\nContent-Type: application/json\r\nExpires: Mon, 04 Aug 2025 09:07:07 GMT\r\nP3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nx-ms-route-info: C520_BL2\r\nx-ms-request-id: 0a94d2bb-fae0-489f-9083-52e0ce405fa3\r\nPPServer: PPV: 30 H: BL02EPF0001D7F6 V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nDate: Mon, 04 Aug 2025 09:08:07 GMT\r\nContent-Length: 217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"41342b8857267b985fab8e146f803b5f","sha1":"e8eb73425e5774fe766d24062933814fef7d3af2","sha256":"bf851980ecbf23056e700064c2b2a29ca6759c8e9dc1601c54a1138e5d1ab0c2","sha512":"c5c5af0c65c288f81bc4166364a639d9911bdc42ba0e9ce5043255b7ec538ca9835f8b8e79e28f66fb3a54442c9f0cb213f17f1cc2915c8e0bedc91ad157202d","ssdeep":"","tlshash":"54d022ad8870212623d90130ff5cc0e1032364006a8228f27e8e8b65752ff603383b86","first_seen":"2025-07-31T13:24:36.688077Z","last_seen":"2025-08-21T21:52:54.112764Z","times_seen":13,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fpt.live.com/Images/Clear.PNG?ctx=jscb1.0\u0026session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026esi=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\u0026eci=eyJ1dmRyIjoiTWVzYSIsInVyZHIiOiJsbHZtcGlwZSIsInZkciI6Ik1vemlsbGEiLCJyZHIiOiJsbHZtcGlwZSIsImlkdWgiOiJmYzk5ZmY3ZjQ5OTEzMTRlMzBiODY5MzM0N2YyZWJmZCJ9\u0026PageId=SI","fqdn":"fpt.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.62.63.247","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fpt.live.com/?session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026PageId=SI","date":"2025-08-04T09:08:09.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fpt.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 14 Jul 2025 11:47:36 GMT","end":"Sat, 10 Jan 2026 11:47:36 GMT"},"fingerprint":{"sha1":"88:BF:86:FF:83:F2:9C:3B:B8:B7:4F:4B:80:D7:44:D8:8B:9C:88:21","sha256":"BB:46:21:E5:D1:38:B6:3C:85:BE:42:5F:F1:1A:52:58:8F:23:8D:25:1A:CC:F2:1B:20:23:CA:F4:21:12:66:FD"}}},"request":{"raw":"GET /Images/Clear.PNG?ctx=jscb1.0\u0026session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026esi=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\u0026eci=eyJ1dmRyIjoiTWVzYSIsInVyZHIiOiJsbHZtcGlwZSIsInZkciI6Ik1vemlsbGEiLCJyZHIiOiJsbHZtcGlwZSIsImlkdWgiOiJmYzk5ZmY3ZjQ5OTEzMTRlMzBiODY5MzM0N2YyZWJmZCJ9\u0026PageId=SI HTTP/1.1\r\nHost: fpt.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fpt.live.com/?session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026PageId=SI\r\nCookie: fptctx2=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWJ9an3rrr4%252f%252fFM%252fXPK9sfNpwotgbo1EKug29RHvRiUYAKt2VJzZ9bl6pjcSdWDiidWOsE7lLDyT1781DgUtNq%252ftsg9Q3rS8mNUHXf108GI7U7LajpvwAjK1JnzRBN3B%252bwUEYR%252bz%252bbXFGBmHaZ%252bvYFFL709quKlffZLq8MVWV3jFzs2rPShvgPoiFJuB7QCSMA0Lilmq%252bFqHPrsSzONf%252bkkNI5W7Yg4L9V6buMcFLi1T%252brGJYuF1tI522ovFkPjl7zm5KI%252blUNkMiAlsrc2%252buMm0; MUID=79c7230c2c274bbbae98d371ee498826\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nset-cookie: fptctx2=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWJ9an3rrr4%252f%252fFM%252fXPK9sfNpwotgbo1EKug29RHvRiUYACKD0Cf1QLhbm1zMAdZZzDa9%252bzaImAkSidxyRYd9s%252bGIXWBHzzZCYZ2rYU5tdgvsJJE8zmiMCTJCAKmtNApIU2ipsrsZTKzd4ff%252fIPlPq1MPZPE94rhQ%252fQQlQfYZ5KPaHcfxYuUNoXrm3GTi%252bkyKOPRx8YEeKL9ppBsTcfblMVbcPebV2XBhRcQvU287CEc0eXHnLO9thPCPpEfczjauSZwkPzYJkyo%252fi6r3K31f7UxlclU%252b%252fWhUdKcsFdU4ZYyMeA%253d%253d; domain=.live.com; path=/; secure; httponly\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\naccess-control-allow-origin: *\r\ndate: Mon, 04 Aug 2025 09:08:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":6,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"aaab7a355103063d9eeb4824a3a6b374","sha1":"e51555f02c32321f3e48f07a0fa5af46df835bfc","sha256":"79ba862622d6fa84ac7e4f98eb95043a255fc2c81711e9400a8aa4d4b1608471","sha512":"d1a0c9c4f628459f5ca904405b2a66a69425a50e8dce1baa43161d784eb219bd3e1fd9447bcbacc314652eda08cf0b02c863c87f3ac1534ae0f62a414c191f1b","ssdeep":"","tlshash":"8440000000000000000000000000000000f000003000000000000000c0000000000000","first_seen":"2024-08-29T13:16:26Z","last_seen":"2026-04-04T13:47:45.496183Z","times_seen":558,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fpt.live.com/?session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026PageId=SI","fqdn":"fpt.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.62.63.247","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:07.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fpt.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 14 Jul 2025 11:47:36 GMT","end":"Sat, 10 Jan 2026 11:47:36 GMT"},"fingerprint":{"sha1":"88:BF:86:FF:83:F2:9C:3B:B8:B7:4F:4B:80:D7:44:D8:8B:9C:88:21","sha256":"BB:46:21:E5:D1:38:B6:3C:85:BE:42:5F:F1:1A:52:58:8F:23:8D:25:1A:CC:F2:1B:20:23:CA:F4:21:12:66:FD"}}},"request":{"raw":"GET /?session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026PageId=SI HTTP/1.1\r\nHost: fpt.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\naccess-control-allow-origin: *\r\nset-cookie: fptctx2=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWJ9an3rrr4%252f%252fFM%252fXPK9sfNpwotgbo1EKug29RHvRiUYAKt2VJzZ9bl6pjcSdWDiidWOsE7lLDyT1781DgUtNq%252ftsg9Q3rS8mNUHXf108GI7U7LajpvwAjK1JnzRBN3B%252bwUEYR%252bz%252bbXFGBmHaZ%252bvYFFL709quKlffZLq8MVWV3jFzs2rPShvgPoiFJuB7QCSMA0Lilmq%252bFqHPrsSzONf%252bkkNI5W7Yg4L9V6buMcFLi1T%252brGJYuF1tI522ovFkPjl7zm5KI%252blUNkMiAlsrc2%252buMm0; domain=.live.com; path=/; secure; httponly\nMUID=79c7230c2c274bbbae98d371ee498826; expires=Tue, 04 Aug 2026 09:08:08 GMT; domain=.live.com; path=/; secure; httponly\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":23664,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23200), with CRLF line terminators","md5":"7e265399fbc3f1314eaf40cb39d67030","sha1":"9e6f12dee2bf22d487a0cbf0ef8f22c18c5be7c7","sha256":"06c196d39227903c0296d584c62b1e2f5451f7c1b7914b5860fc80b6fad72340","sha512":"cd6d8b782578a22162e7d1768d58d8c86b34812e63fab622905b0c90453a15832db3b9e1fac23d37fde76b67b30f6949385e6e0588b8d214a59ae6ccbeb44ae7","ssdeep":"384:HDXbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpV:jzH9yF1IBBdq5yF/2dW","tlshash":"3db25d99b8a37839473a30e610bf9181b0368b764c1d0180f1ef9eb539557bd621bfb6","first_seen":"2025-08-04T09:08:30.361844Z","last_seen":"2025-08-04T09:08:30.361844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":288,"dns":67,"connect":104,"send":0,"wait":103,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/16.000.30694.5/images/favicon.ico","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:07.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /16.000.30694.5/images/favicon.ico HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 17174\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Jul 2025 23:43:47 GMT\r\netag: \"0x8DDC8B06FDBFFD6\"\r\nx-ms-request-id: d533ab5f-c01e-0015-6f0d-04eb48000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u7b\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-04-04T15:49:26.972306Z","times_seen":163405,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"df.cfp.microsoft.com/Clear.HTML?ctx=Ls1.0\u0026wl=False\u0026session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026id=f0be7e71-609d-2155-211a-f01997aa78da\u0026w=8DDD3366DCA50E6\u0026tkt=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWJ9an3rrr4%252f%252fFM%252fXPK9sfNpwotgbo1EKug29RHvRiUYAKt2VJzZ9bl6pjcSdWDiidWOsE7lLDyT1781DgUtNq%252ftsg9Q3rS8mNUHXf108GI7U7LajpvwAjK1JnzRBN3B%252bwUEYR%252bz%252bbXFGBmHaZ%252bvYFFL709quKlffZLq8MVWV3jFzs2rPShvgPoiFJuB7QCSMA0Lilmq%252bFqHPrsSzONf%252bkkNI5W7Yg4L9V6buMcFLi1T%252brGJYuF1tI522ovFkPjl7zm5KI%252blUNkMiAlsrc2%252buMm0\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d","fqdn":"df.cfp.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.62.63.247","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fpt.live.com/?session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d\u0026PageId=SI","date":"2025-08-04T09:08:09.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fpt.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 14 Jul 2025 11:47:36 GMT","end":"Sat, 10 Jan 2026 11:47:36 GMT"},"fingerprint":{"sha1":"88:BF:86:FF:83:F2:9C:3B:B8:B7:4F:4B:80:D7:44:D8:8B:9C:88:21","sha256":"BB:46:21:E5:D1:38:B6:3C:85:BE:42:5F:F1:1A:52:58:8F:23:8D:25:1A:CC:F2:1B:20:23:CA:F4:21:12:66:FD"}}},"request":{"raw":"GET /Clear.HTML?ctx=Ls1.0\u0026wl=False\u0026session_id=c9f43e59f65c4b52a7cc9554553f24df\u0026id=f0be7e71-609d-2155-211a-f01997aa78da\u0026w=8DDD3366DCA50E6\u0026tkt=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWJ9an3rrr4%252f%252fFM%252fXPK9sfNpwotgbo1EKug29RHvRiUYAKt2VJzZ9bl6pjcSdWDiidWOsE7lLDyT1781DgUtNq%252ftsg9Q3rS8mNUHXf108GI7U7LajpvwAjK1JnzRBN3B%252bwUEYR%252bz%252bbXFGBmHaZ%252bvYFFL709quKlffZLq8MVWV3jFzs2rPShvgPoiFJuB7QCSMA0Lilmq%252bFqHPrsSzONf%252bkkNI5W7Yg4L9V6buMcFLi1T%252brGJYuF1tI522ovFkPjl7zm5KI%252blUNkMiAlsrc2%252buMm0\u0026CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d HTTP/1.1\r\nHost: df.cfp.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fpt.live.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nset-cookie: dfpfpt=f0be7e71609d2155211af01997aa78da; expires=Tue, 04 Aug 2026 09:08:09 GMT; domain=.cfp.microsoft.com; path=/; secure; httponly\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\naccess-control-allow-origin: *\r\ndate: Mon, 04 Aug 2025 09:08:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2276,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2148), with CRLF line terminators","md5":"1415372d8312109834deb055600c7037","sha1":"e7e514b0bb6681796c31740f9f570d3ba3039301","sha256":"2609ccb95a6b53a171e11eca6147989dfa0e60d284edf4ac3a1c6cdedc313243","sha512":"6b7265515ae10b128a810b1c9337728f7470d10e52e4fe15bb32119c3d0295f79d82d28cb72fca996760e8fb7bf39970cdf3029b158cc26545b420f5f53d0c1d","ssdeep":"","tlshash":"344185262210b5e0cae3a478fc5b7215d2b1224b2e59415cad4dc0856e3c45be6ffefe","first_seen":"2025-08-04T09:08:30.363354Z","last_seen":"2025-08-04T09:08:30.363354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"51.132.193.104","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:10.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 02 Jul 2025 01:00:37 GMT","end":"Mon, 29 Dec 2025 01:00:37 GMT"},"fingerprint":{"sha1":"93:F1:E9:F1:3F:F8:98:0F:75:F1:5E:11:C5:15:36:20:56:B9:C8:D6","sha256":"3D:4C:82:4B:E0:12:69:FE:8E:EF:25:EB:2D:6B:28:FA:72:30:39:72:93:FB:B0:0D:D8:B4:C8:72:C3:22:61:8E"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.15\r\napikey: 69adc3c768bd4dc08c19416121249fcc-66f1668a-797b-4249-95e3-6c6651768c28-7293\r\nupload-time: 1754298490602\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 8371\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 153\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: MC1=GUID=1e250f15c3de427391549ea80f3d56d4\u0026HASH=1e25\u0026LV=202508\u0026V=4\u0026LU=1754298490776; Domain=.microsoft.com; Expires=Tue, 04 Aug 2026 09:08:10 GMT; Path=/;Secure; SameSite=None\nMS0=5f34c2fdd5134a57b5287f4b8c531826; Domain=.microsoft.com; Expires=Mon, 04 Aug 2025 09:38:10 GMT; Path=/;Secure; SameSite=None\r\ntime-delta-millis: 174\r\naccess-control-allow-headers: P3P,Set-Cookie,time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://login.live.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Mon, 04 Aug 2025 09:08:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":153,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b078ad621d55b5022f07e0cb991eb9ed","sha1":"a11daf8c8ad9744ae48fc503c6620f9e6ebf880d","sha256":"df6d5bfbc5273fc6307b523427ae8d9965f17af88361f3e6e2c8e54618b137e0","sha512":"6298298864f9766fb0e19f571ce8ce15f98913899dfbf30d6d7644fe7df60152117c28e7c0fad348cc6f5477324daa5ca186e4c099e9623ae307ac6d3d0b568d","ssdeep":"","tlshash":"17c08c9222646bf90b850b0f4cd04ca2b019fb0ca20136840085162885c4ec89489048","first_seen":"2025-08-04T09:08:30.364177Z","last_seen":"2025-08-04T09:08:30.364177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":55,"connect":25,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/5/js/login-fluent_v2_en_fjAGl4Tk-sOGncU-UuIOOg2.js","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:06.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /shared/5/js/login-fluent_v2_en_fjAGl4Tk-sOGncU-UuIOOg2.js HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 200428\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 27 Jul 2025 03:18:42 GMT\r\netag: \"0x8DDCCBC4A0C1486\"\r\nx-ms-request-id: d6483325-801e-0066-280e-04b3db000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u56\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":881849,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7e30069784e4fac3869dc53e52e20e3a","sha1":"97efaf8d776725a4f41c525e6d0bcc782588519c","sha256":"262f3f3cafa9f97d59f9d5c64a124c47ce3606f1a21636a3d7f04482983021df","sha512":"84bfad2d20b344319b773a1a67c13ab73801e1ed8b3e55c46b5d53385edab6ef1eca0d1ef8680df9aaa0eecac5e5ac47bf15fd472cdb8d92c4913f64d844ff52","ssdeep":"24576:V4wNuNMpI8f0wUZg1yJc3/+o6jNOr3AjonesTIS:VYMpI8f0wUZg1yJc3uNOr3AjoneKIS","tlshash":"f7155a987ad0fe6240a351b6503f250bf2393914986de514f736cdc6686988fb273f2b","first_seen":"2025-08-04T01:20:30.392729Z","last_seen":"2025-08-04T09:08:30.365167Z","times_seen":4,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":188,"dns":152,"connect":8,"send":0,"wait":15,"receive":45,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/5/js/fluent-chunk_vendors__r2TeTUtRNB0rQMc8ciePQ2.js","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:06.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /shared/5/js/fluent-chunk_vendors__r2TeTUtRNB0rQMc8ciePQ2.js HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 124212\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 21 Jun 2025 00:20:08 GMT\r\netag: \"0x8DDB0596132180D\"\r\nx-ms-request-id: d530d986-c01e-0015-470d-04eb48000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u57\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":420377,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65458)","md5":"febd9379352d44d074ad031cf1c89e3d","sha1":"7597391e2cc094b1cc384098e8d2d9c444442827","sha256":"07af549396d257986af4949a6da97b381542de86c729cfaaaba485cecc97f9a2","sha512":"e32c5fddd50a25b97ed47cebfafe4efe166c4e6491d5f5ee7e099d08e3cf859a9b0a511853f7b4603cfa8b6e34369c378073d27778f7f2fb3b37feace9be41b0","ssdeep":"6144:HcGXdE/fcLuVJod2441SYfcQ9stB8IpKS:ldEAF","tlshash":"38941ad975d2f0a217f321b2407f140bb33e691a680c8850e215edd5bcb999e923bf6d","first_seen":"2025-07-03T22:03:27.241335Z","last_seen":"2025-08-06T18:17:16.478617Z","times_seen":16,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":181,"dns":147,"connect":12,"send":0,"wait":15,"receive":38,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/5/js/fluent-chunk_fluentui_qlu1gOQLobRfO6MTZ0yIyg2.js","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:06.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /shared/5/js/fluent-chunk_fluentui_qlu1gOQLobRfO6MTZ0yIyg2.js HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 202331\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 27 Jul 2025 03:18:29 GMT\r\netag: \"0x8DDCCBC4258E61A\"\r\nx-ms-request-id: c9799459-701e-005d-3e0d-04f67f000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u58\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":831458,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65457)","md5":"aa5bb580e40ba1b45f3ba313674c88ca","sha1":"6d4eadf54c2727d2c3f56240e6971cc232aa7ef9","sha256":"b1b414c1174a24af6cdd805c2b3414a9ab20264b56d4a1703900b5a3f784587b","sha512":"45719f2ec48018ccfa20b79492bfe57a992a558c5d501725625329524af5ee2f72263c6a3ae9c588f761cb72d6bd8f89ace4b2e255ed7283b1bd1d1674bc5585","ssdeep":"24576:iVQmLFYZGgi5MYFQbMjh54RVkJSe3JjDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMf:al5MYFQbMjh54RVkJSe3JjDvpttZwJbu","tlshash":"df054bd8f284f47e6a57b53e403fa04ae33eb900581586c0f337d5d928e96c792a3e65","first_seen":"2025-08-04T01:20:30.385767Z","last_seen":"2025-08-04T09:08:30.366284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":189,"dns":151,"connect":12,"send":0,"wait":22,"receive":40,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_v2_9966a2b9a2d7598281cd.js","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.live.com/","date":"2025-08-04T09:08:07.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 25 May 2025 11:28:42 GMT","end":"Fri, 21 Nov 2025 11:28:42 GMT"},"fingerprint":{"sha1":"C5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41","sha256":"B5:BD:8F:6B:CE:AD:51:28:D1:35:47:51:8C:DA:DD:86:7D:4E:34:FA:89:65:22:09:F0:96:D8:B4:70:39:8F:79"}}},"request":{"raw":"GET /shared/5/chunks/oneds-analytics-js_v2_9966a2b9a2d7598281cd.js HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/\r\nOrigin: https://login.live.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Aug 2025 09:08:07 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 32818\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 27 Feb 2025 18:19:15 GMT\r\netag: \"0x8DD575B3E05EC32\"\r\nx-ms-request-id: 22a1383b-001e-0078-7c0d-045f03000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250804T090807Z-16f4dc889ddbmmnzhC1SVGfcmg000000050g000000004u6n\r\nx-fd-int-roxy-purgeid: 79218156\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":90684,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65436)","md5":"85609dcf5e6a6c5be2a4007de28a3819","sha1":"7fc5c6d5b07afd945dde7eac02fa6ccd94bc92d1","sha256":"55324d6c9baea9d27b95e084a81713098869af14e30f2bc094ad049c03589a13","sha512":"ab72a8f20ca2209cd4ecf8f432d79781bf8963686225e42daf58fc055c8f445c946c5f9bb01c55667e3b0deaf335f365924bf54f9bb6341ba7d2ff6cc2c33b17","ssdeep":"768:PVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6LlW:9+0Z9yFrGi8SRGfyC0JalFx3gKa2","tlshash":"c093e6cdb2c2b022479370f541bf114fa23f6d55288d91a0e215f8e93cb859da2a7f9d","first_seen":"2025-06-07T09:01:03.409188Z","last_seen":"2026-04-04T13:47:45.487785Z","times_seen":285,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}