pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html
28 kB URL pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html
IP
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash eb5ad20bd1f68c8f8ffa1389fa9c6eb2
9e8c42c96d605bc4c434ee7ddfe83a3961db4104
fecf7bd475748b87940d5fe4118cf2a1a4bcec2984e38ef027ea5d4855be074b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /opi.html HTTP/1.1
Host: pub-95aa6110151d4a07a166adf38b969da3.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 21 Sep 2023 00:25:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"eb5ad20bd1f68c8f8ffa1389fa9c6eb2"
Last-Modified: Wed, 20 Sep 2023 06:48:40 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 809e2c08995f5697-OSL
Content-Encoding: gzip
code.jquery.com/jquery-3.1.1.min.js
200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.1.1.min.js
IP
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32030)
Hash e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 21 Sep 2023 00:25:38 GMT
age: 455336
x-served-by: cache-lga21947-LGA, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 18959
x-timer: S1695255938.120160,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
www.office.com/estslogout?ru=/
302 Found 0 B URL GET HTTP/2 www.office.com/estslogout?ru=/
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
Fingerprint13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4
ValidityWed, 13 Sep 2023 22:45:31 GMT - Sat, 07 Sep 2024 22:45:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?ru=/ HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
vary: Accept-Encoding
set-cookie: OH.SID=3aeb2a9c-b135-44e4-ab6a-7cc02bcdaea9; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Thu, 21 Sep 2023 08:25:38 GMT; path=/; secure; samesite=none; httponly
OH.FLID=64788ac4-e4e0-4d22-8c0f-05ecf469871e; expires=Sat, 21 Sep 2024 00:25:38 GMT; path=/; secure; samesite=none; httponly
MUID=2F704D5D631E68D320075ECE6232698C; path=/; secure; expires=Tue, 15-Oct-2024 00:25:38 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 77AEE88F8311435596EE28B7498A27D8 Ref B: SVG20EDGE0111 Ref C: 2023-09-21T00:25:38Z
date: Thu, 21 Sep 2023 00:25:37 GMT
content-length: 0
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
200 OK 673 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators
Hash bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Thu, 13 Feb 2020 02:05:12 GMT
etag: 0x8D7B0292911C366
x-cache: TCP_HIT
x-ms-request-id: ab15a472-801e-005f-54e5-e5dd5f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 00/wBZQAAAADNHC9uvfWEQZeRNqmw3e2eQU1TMDRFREdFMTkxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0go0LZQAAAAAfQeoocMX5SKkJJBqNPIjWU1ZHMjBFREdFMDUxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Thu, 21 Sep 2023 00:25:37 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
200 OK 240 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc096da6aa2dba3f81fcc1c8262157c
a50776316f0220ed7cd7882a68c742a8861c999d
ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 240
content-type: image/png
content-md5: fMCW2mqi26P4H8wcgmIVfA==
last-modified: Fri, 02 Nov 2018 20:25:10 GMT
etag: 0x8D64101494D74DC
x-cache: TCP_HIT
x-ms-request-id: ccfedb1d-101e-0036-2637-ebec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 03KMKZQAAAADUqDFTgnX/QLSbx/Aoq3KsQU1TMDRFREdFMTkxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0go0LZQAAAABzKU3rOHksRJlQNf6pb9jlU1ZHMjBFREdFMDUxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Thu, 21 Sep 2023 00:25:37 GMT
X-Firefox-Spdy: h2
www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F
302 Found 0 B URL GET HTTP/2 www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
Fingerprint13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4
ValidityWed, 13 Sep 2023 22:45:31 GMT - Sat, 07 Sep 2024 22:45:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
vary: Accept-Encoding
set-cookie: OH.SID=d6793e9a-1d33-47f3-870a-affe4c53137e; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Thu, 21 Sep 2023 08:25:38 GMT; path=/; secure; samesite=none; httponly
OH.FLID=3e7464b9-45ed-4931-bd61-410793713e95; expires=Sat, 21 Sep 2024 00:25:38 GMT; path=/; secure; samesite=none; httponly
MUID=1027BA4AF3656D8631A5A9D9F2496C7B; path=/; secure; expires=Tue, 15-Oct-2024 00:25:38 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8DEF71B2435941128317FBA8D64DC93D Ref B: SVG20EDGE0111 Ref C: 2023-09-21T00:25:38Z
date: Thu, 21 Sep 2023 00:25:37 GMT
content-length: 0
X-Firefox-Spdy: h2
login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
FingerprintB8:EC:FA:34:DB:AA:B7:DE:F3:A0:CE:69:06:5C:14:E0:D0:28:69:40
ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 22 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10930), with CRLF, LF line terminators
Hash a16466739005564ed3c914ff8d3592f4
f9aa69e090dfa55d6f795011ea8a73e3762d206d
d89f041749acd61aeaac5dcfaa8ce396b28954ca5e96da3b3503a0cccd1d27f8
GET /logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 8facc51b-bd17-4571-a69f-a11759d90e00
x-ms-ests-server: 2.1.16368.8 - WEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P8XXnj5kOdinthJ967HVph3BmHL2Qk6CVKIRfa2yKUK6p66ORa_erNDK-yHFBmgbhsWWPXACxIrkg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P_UrElN1apgLknrLSNasUo-PYAJGo8HsfaSIpNFzQyRFu84LzyHuApbQqVqiZbRHmzz5v8bwAPtTA; domain=.login.microsoftonline.com; expires=Wed, 20-Dec-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P_zHCA-HR8eYOQsCMCr6SB6UHni4YSXfysIqajqAnkkMs9zrPtg2dzZcFUNlDJZgXlfKSWAUkiRRA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPCUGXzQ5nIN36atehcbJk_9UTIlReVLwJtkeFtV47f1q4GwPmysa8dnuWnCrM0h8F6xLYVdRPq16RO3mFHyu21_G-VM3TeaVjVLLMx4YGtdUgAA; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AmLSTmKNaUZDog4vZVtdFUg; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPxb8yRizkVjmp-IfXPQKs6kDgo4WYMIPTEDQIQYOCcyTFbUG505ksGwKTfevKhAviUOljx3RTtlPRb35dqSlGve79V5cloG15umv5SmCRobE8rRq5Ws9dbI9dRrPh9V6NoYx6UDVgWHh-vk-IY78YWb-R99rT8jlBDB-luHzr5KIgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Thu, 21 Sep 2023 00:25:37 GMT
Content-Length: 10837
aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png
200 OK 207 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ad43084800fd8b50a2576b5173746fe
97c08e6062ff37f6e7a6c65e94d693ccc9ccd443
2c03ee38a4eba6a047c3a5bacb3eb461efe14be8acd46ae772350a4dea2f0175
GET /ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 207
content-type: image/png
content-md5: CtQwhIAP2LUKJXa1FzdG/g==
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D6410151EBB082
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 001bf4a7-101e-0036-4a7b-ebec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0go0LZQAAAAB/6wqPRtcoTKltmjGSeoY0QU1TMDRFREdFMTkxMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0go0LZQAAAABzs9xcOipARrquCgK5XjFwU1ZHMjBFREdFMDUxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Thu, 21 Sep 2023 00:25:37 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
FingerprintB8:EC:FA:34:DB:AA:B7:DE:F3:A0:CE:69:06:5C:14:E0:D0:28:69:40
ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 22 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11115), with CRLF, LF line terminators
Hash e6285ddd6244097f1d491fefb3e48c79
b964c18048a1c6b4f1893d96a17696969c52c576
cc1a8d79ffdc43aac0f006c9f9a1f125638dc4e9fe79e2f7e54be7e9cff6b76b
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 3777b231-8d3b-4e22-a80a-8e262ba70f00
x-ms-ests-server: 2.1.16314.5 - FRC ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P-FH-YNZyJU1q9mIBQqGidhr-stQeHvmHxddH5U522P_0dBg4Tq10bl82mulRNaHJ5lP5IOM4MIbA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P8_HrEv7I2KDl_TV5WqcC-rTeI3vZX9P43GQP3bYsFFusOTDF6We2L6d4jo7lQnhrtCCUmphZCWVw; domain=.login.microsoftonline.com; expires=Wed, 20-Dec-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P-DjO_foUsEUTZyCOr_lCeouwsD2YKhdzvctImu6v9GMSYOLmoTBUflubOOjjOllLuaXDqPj23I4g; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPc4X-SZyChx-BBjlmXfcDCfkYgnENGjG-E66HrKN2a3bu28pI15aGXueNE-wQfL7V0DDPD401NvK7SINFDukxKF6rB_zmv5WSy4dawuXmPNggAA; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AjS-cQJcJNtEukjNGjnVUII; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP03cxSl62y1kV30u5WxAR2FKXjnnJz07pk43P1OwJQbI0otOyOyqYPGjJ3PW7zmRh6ElI5snbKEcjOIvcsbEqNMAA2pFeq49AsRXZmXTHyiUt43EY1AY1c6r0UP0TvDLBiD_tWFUDotGXF2SQiEUyESme9X6lVVWpyCiJLdSzS1ggAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Thu, 21 Sep 2023 00:25:37 GMT
Content-Length: 10983
login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
FingerprintB8:EC:FA:34:DB:AA:B7:DE:F3:A0:CE:69:06:5C:14:E0:D0:28:69:40
ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 22 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11118), with CRLF, LF line terminators
Hash 949683e57880c08b81365bb83971a2cf
5a48036e9b36e9c6edac3a4207866ad0610ae9a3
9ee5a0d3824b81436fe7e6fa2ef30c636c76de19105c8e5f798c0a5c53354165
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABAAIAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P8XXnj5kOdinthJ967HVph3BmHL2Qk6CVKIRfa2yKUK6p66ORa_erNDK-yHFBmgbhsWWPXACxIrkg; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P_UrElN1apgLknrLSNasUo-PYAJGo8HsfaSIpNFzQyRFu84LzyHuApbQqVqiZbRHmzz5v8bwAPtTA; ESTSAUTH=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P_zHCA-HR8eYOQsCMCr6SB6UHni4YSXfysIqajqAnkkMs9zrPtg2dzZcFUNlDJZgXlfKSWAUkiRRA; ESTSAUTHLIGHT=+; buid=AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPCUGXzQ5nIN36atehcbJk_9UTIlReVLwJtkeFtV47f1q4GwPmysa8dnuWnCrM0h8F6xLYVdRPq16RO3mFHyu21_G-VM3TeaVjVLLMx4YGtdUgAA; fpc=AmLSTmKNaUZDog4vZVtdFUg; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPxb8yRizkVjmp-IfXPQKs6kDgo4WYMIPTEDQIQYOCcyTFbUG505ksGwKTfevKhAviUOljx3RTtlPRb35dqSlGve79V5cloG15umv5SmCRobE8rRq5Ws9dbI9dRrPh9V6NoYx6UDVgWHh-vk-IY78YWb-R99rT8jlBDB-luHzr5KIgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: f69b21eb-6f23-4128-a988-e30f9da74a00
x-ms-ests-server: 2.1.16368.8 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P-w1rS6dREop3I3P0TbxTtY9aEPY1kYEhp6qvz2qkoRd_2nmd30G29OWojCF6jNbn1Zu3gHCBHPRg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Wed, 21-Sep-2033 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P95fWLsnI8ECVPWYtnf36tNAuaZ923QV90MOCt9Ju-rwol29npZV4amF6Equthq3DE2DxT0PXQd-A; domain=.login.microsoftonline.com; expires=Wed, 20-Dec-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAtyolDObpQQ5VtlI4uGjEPAgDs_wUA9P8dNGnNBjBfwwfdikqILdIShtZFJmQYccTDuBGrMkEq8yBLyIbstKKiwhGk3PljNx1aqnj-_zgAYg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPB3U4O2kJH6K6FYqDPTWV_j0EPRLJV3JAwc0C-ZKbc3ovXOCAPe7Z_ZlvVFYKJNuuhcHoi6eGVRv-PgkKC4VN4MLHMi2vrFP3SXn3naZCOSAgAA; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AmLSTmKNaUZDog4vZVtdFUg; expires=Sat, 21-Oct-2023 00:25:38 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Thu, 21 Sep 2023 00:25:37 GMT
Content-Length: 10980
aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D641015620C409
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 6d59ab3b-301e-005c-0e7b-eba059000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0go0LZQAAAABzLvGoTFOhRJDN4WqRUm31QU1TMDRFREdFMTkwNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0go0LZQAAAABYx1oCmgzeQ5ul9oOj9ToAU1ZHMjBFREdFMDUxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Thu, 21 Sep 2023 00:25:37 GMT
X-Firefox-Spdy: h2
smtpjs.com/v3/smtp.js
200 OK 871 B IP
ASN #20860 Iomart Cloud Services Limited
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerLet's Encrypt
Subjectsmtpjs.com
FingerprintD2:4C:9D:62:EB:76:E6:80:AA:FD:5C:B1:D4:7A:9E:E4:EF:1F:9D:4E
ValidityTue, 12 Sep 2023 02:05:05 GMT - Mon, 11 Dec 2023 02:05:04 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (841), with CRLF line terminators
Hash 3834e1b9e65ca954b7479464ea1e5118
437df45dbf59c3a3414236f44e3bcd5045bfe314
fc33c6b2c79aafa930e841962ae3c25bf8f56cbc20ec48fc2b0ddd0aa6ee23b6
GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 10 Nov 2020 17:17:51 GMT
accept-ranges: bytes
etag: "162f436b85b7d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Thu, 21 Sep 2023 00:25:37 GMT
content-length: 871
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash 0032b5f3a9d4c58d58f356090b3794c8
fc597da0138081d911658f818de04080d95e28d4
2529f3602c97b2531e4ccc6f1e23440feb70783d091fcd8480539f573744be4d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 21 Sep 2023 00:25:38 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 20 Sep 2023 11:45:44 GMT
Expires: Wed, 27 Sep 2023 11:45:43 GMT
Etag: "fc597da0138081d911658f818de04080d95e28d4"
Cache-Control: max-age=559647,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 809e2c0fe905568e-OSL
api.ipify.org/?format=jsonp&callback=getPublic
200 OK 33 B URL GET HTTP/1.1 api.ipify.org/?format=jsonp&callback=getPublic
IP
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerSectigo Limited
Subject*.ipify.org
FingerprintF4:76:2D:2C:65:D1:15:BE:19:A4:C5:E0:8D:EB:89:1A:B6:75:4A:54
ValidityTue, 07 Feb 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b1fdb43145cf7c3f6f2a1370889232f1
19cd287ba1ffae5908cf8d53d13abc302dac6f9c
9a751b74811a7c42413bc5109600706395ac8a8c057f7e6a55fc45b7ea41b191
GET /?format=jsonp&callback=getPublic HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.1
Date: Thu, 21 Sep 2023 00:25:38 GMT
Content-Type: application/javascript
Content-Length: 33
Connection: keep-alive
Vary: Origin
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_prc91eyu9sqvbxj8tusclg2.css
200 OK 20 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_prc91eyu9sqvbxj8tusclg2.css
IP
Requested by https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash 3eb0bdd4462ef52aaf6f18fc4eeb022e
c3eebed8e561fdc6c69c7277e478abd64d9cb9e1
afc0898b6e7779ecd64b6a5a5b2626284d3e0316ad79cc45662c6d0158f4b2a1
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_prc91eyu9sqvbxj8tusclg2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 3483171
cache-control: public, max-age=31536000
content-md5: 130lE3UdeNphf/ypsCLZsw==
content-type: text/css
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8DB99C682D849D1
last-modified: Thu, 10 Aug 2023 17:23:28 GMT
server: ECAcc (ska/F77A)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9b583dd7-701e-003c-2a74-cc8f2e000000
x-ms-version: 2009-09-19
content-length: 20154
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
IP
Requested by https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash 917d5d03b2f6773ea71def64520935f4
281282d233fd6dd4185df486f31a2ba38aaf5f85
585c15f044d19a1f0a1ba994b70992ce92e30cfd9443bab663d3f17b13d69708
GET /ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9068035
cache-control: public, max-age=31536000
content-md5: upI7aPOzsdXSeL+Vv8o5ww==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8DA2286D5C4F576
last-modified: Wed, 20 Apr 2022 04:32:53 GMT
server: ECAcc (ska/F7AA)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2121446a-901e-0025-65a8-99b575000000
x-ms-version: 2009-09-19
content-length: 44785
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 4910730
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
IP
Requested by https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash 917d5d03b2f6773ea71def64520935f4
281282d233fd6dd4185df486f31a2ba38aaf5f85
585c15f044d19a1f0a1ba994b70992ce92e30cfd9443bab663d3f17b13d69708
GET /ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9068035
cache-control: public, max-age=31536000
content-md5: upI7aPOzsdXSeL+Vv8o5ww==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8DA2286D5C4F576
last-modified: Wed, 20 Apr 2022 04:32:53 GMT
server: ECAcc (ska/F7AA)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2121446a-901e-0025-65a8-99b575000000
x-ms-version: 2009-09-19
content-length: 44785
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js
IP
Requested by https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash 917d5d03b2f6773ea71def64520935f4
281282d233fd6dd4185df486f31a2ba38aaf5f85
585c15f044d19a1f0a1ba994b70992ce92e30cfd9443bab663d3f17b13d69708
GET /ests/2.1/content/cdnbundles/aad.login.min_kx1da7l2dz6nhe9kugk19a2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9068035
cache-control: public, max-age=31536000
content-md5: upI7aPOzsdXSeL+Vv8o5ww==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8DA2286D5C4F576
last-modified: Wed, 20 Apr 2022 04:32:53 GMT
server: ECAcc (ska/F7AA)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2121446a-901e-0025-65a8-99b575000000
x-ms-version: 2009-09-19
content-length: 44785
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 4910730
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=VqzLCukm_msGrh8nk5rxehA5FxsBh37uaTH7EltPtuy8xc09oCQjfLuQuVz_L1R7wf65hoZqb0PhrIL2rD7w-wU6vH2Nmnnzk0ZrWlGw9PWXRxY-v6dCQsClaJBtxkNA&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 4910730
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9473492
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Thu, 21 Sep 2023 00:25:38 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9473493
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Thu, 21 Sep 2023 00:25:39 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
200 OK 17 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html#3mail@slurpmail.net
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-95aa6110151d4a07a166adf38b969da3.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 17174
content-type: image/x-icon
content-md5: EuPayFgGHQiAI7K9SOL6lg==
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-cache: TCP_HIT
x-ms-request-id: 82df96d6-301e-0024-6f50-eb0a48000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0x1wLZQAAAACUJZh04WnARJwsS+Xit0emQU1TMDRFREdFMTkyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0g40LZQAAAADJF1iKsSWcQ4gAnIxfT5E8U1ZHMjBFREdFMDUxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Thu, 21 Sep 2023 00:25:38 GMT
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9473493
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Thu, 21 Sep 2023 00:25:39 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=xjCgpna4p814Uv7orMf9AQRAGGrxXDPo2JirTKxcHtLdTX-f_B19O7L45lwhGkHpb5U5flKxQS7NYaiE1oHslq5yC2xoIq-XYFCDLhY7dHP4rftwf4JOQmg8IZay4dTH&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 9473493
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Thu, 21 Sep 2023 00:25:39 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html
200 OK 330 kB URL User Request GET HTTP/1.1 pub-95aa6110151d4a07a166adf38b969da3.r2.dev/opi.html
IP
Certificate IssuerLet's Encrypt
Subject*.r2.dev
FingerprintE8:0C:C2:4D:15:01:60:A8:F1:76:79:D2:4D:CB:27:19:C0:CF:60:B2
ValiditySun, 13 Aug 2023 17:25:54 GMT - Sat, 11 Nov 2023 17:25:53 GMT
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 330 kB (329683 bytes)
Hash eb5ad20bd1f68c8f8ffa1389fa9c6eb2
9e8c42c96d605bc4c434ee7ddfe83a3961db4104
fecf7bd475748b87940d5fe4118cf2a1a4bcec2984e38ef027ea5d4855be074b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /opi.html HTTP/1.1
Host: pub-95aa6110151d4a07a166adf38b969da3.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 21 Sep 2023 00:25:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"eb5ad20bd1f68c8f8ffa1389fa9c6eb2"
Last-Modified: Wed, 20 Sep 2023 06:48:40 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 809e2c08995f5697-OSL
Content-Encoding: gzip
104.18.3.35
20.190.177.146
109.169.71.112
152.199.23.37
0.0.0.0